CVE-2025-27218 PoC — Sitecore Experience Manager和Experience Platform 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27218.yaml

Associated Vulnerability

Title:Sitecore Experience Manager和Experience Platform 安全漏洞 (CVE-2025-27218)
Description:Sitecore Experience Platform（XP）和Sitecore Experience Manager（XM）都是丹麦Sitecore公司的产品。Sitecore Experience Platform是一套客户数字体验平台。Sitecore Experience Manager是一个管理软件。 Sitecore Experience Manager和Experience Platform存在安全漏洞，该漏洞源于存在反序列化缺陷，会导致远程代码执行。

Description

Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.

File Snapshot


 id: CVE-2025-27218

info:
  name: Sitecore Experience Manager (XM)/Experience Platform (XP) 10.4 - I

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!