Sitecore XM、XC 和 XP 身份验证后 Zip Slip 导致的远程代码执行 (RCE)

该漏洞的潜在影响非常严重。攻击者可以利用此漏洞在 Sitecore 服务器上上传并执行恶意代码，从而完全控制系统。这可能导致数据泄露、系统破坏、甚至整个基础设施的瘫痪。攻击者可以利用此漏洞访问敏感数据，例如用户凭据、商业机密和客户信息。此外，攻击者还可以利用此漏洞作为跳板，进行横向移动，攻击网络中的其他系统。由于 Sitecore Experience Manager 通常用于处理关键业务流程和敏感数据，因此此漏洞的潜在影响范围非常广泛。

Organizations heavily reliant on Sitecore Experience Manager for content management and digital experience delivery are at significant risk. This includes businesses using Sitecore for e-commerce, marketing automation, and customer relationship management. Specifically, deployments utilizing older versions (9.0-10.4) without robust file upload validation are particularly vulnerable. Shared hosting environments where multiple tenants share the same server infrastructure also face increased risk due to the potential for cross-tenant exploitation.

• .NET / Sitecore: Monitor Sitecore logs for unusual file upload activity, particularly attempts to write files outside of designated upload directories. Use PowerShell to check for unexpected files in sensitive locations.

Get-ChildItem -Path "C:\inetpub\wwwroot\sitecore\*" -Recurse -Filter "*.config"

• .NET / Sitecore: Examine web server access logs for HTTP POST requests to file upload endpoints with suspicious ZIP archive filenames or content. • .NET / Sitecore: Implement Windows Defender exploit mitigation rules to detect and prevent path traversal attacks. • .NET / Sitecore: Review Sitecore configuration files for any custom file upload handlers that might be vulnerable to path traversal.

1. 2025-06-17Disclosure

   disclosure

2. 2025-06-17Discovery

   discovery

3. 2025-06-17Patch

   patch

1. 已保留2025-04-15
2. 发布日期2025-06-17
3. 修改日期2026-02-26
4. EPSS 更新日期2026-03-23

为了减轻 CVE-2025-34510 的风险，建议尽快升级至 Sitecore 官方发布的修复版本。如果无法立即升级，可以考虑以下缓解措施：限制上传文件的类型和大小，严格控制用户权限，并实施输入验证以防止路径遍历攻击。此外，可以配置 Web 应用防火墙 (WAF) 以检测和阻止恶意上传请求。监控 Sitecore 服务器的日志文件，查找可疑活动，例如未经授权的文件写入。升级后，请验证修复是否成功，例如通过尝试上传包含路径遍历序列的 ZIP 压缩包来测试。