CVE-2025-34511
Last modified
CVE-2025-34511 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remote code execution.. EPSS estimates a 8.50% chance of exploitation in the next 30 days.
Description
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remote code execution.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sitecore | Experience Commerce | >= 9.0, <= 10.4 |
| Sitecore | Experience Manager | >= 9.0, <= 10.4 |
| Sitecore | Experience Platform | >= 9.0, < 10.4 |
| Sitecore | Experience Platform | 10.4 |
| Sitecore | Managed Cloud | All versions |
References
- https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-34511?
How severe is CVE-2025-34511?
How do I fix CVE-2025-34511?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-34505Rejected reason: This CVE ID was rejected because it was res…
- CVE-2025-34506WBCE CMS version 1.6.3 and prior contains an authenticated r…8.8
- CVE-2025-34507Rejected reason: This CVE ID was rejected because it was res…
- CVE-2025-34508A path traversal vulnerability exists in the file dropoff fu…6.3
- CVE-2025-34509Sitecore Experience Manager (XM) and Experience Platform (XP…7.5
- CVE-2025-34510Sitecore Experience Manager (XM), Experience Platform (XP), …8.8
- CVE-2025-34512Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden conta…6.1
- CVE-2025-34513Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden conta…9.8
- CVE-2025-34514Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden conta…8.8
- CVE-2025-34515Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden conta…9.8
- CVE-2025-34516Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden conta…9.8
- CVE-2025-34517Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden conta…7.5
Are you affected by CVE-2025-34511?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST