---
id: 8981
title: "[CVE-2024-46938] Leveraging An Order of Operations Bug to Achieve RCE in Sitecore 8.x - 10.x"
cve: CVE-2024-46938
source_domain: slcyber.io
source_url: "https://www.slcyber.io/research/leveraging-an-order-of-operations-bug-to-achieve-rce-in-sitecore-8-x---10-x"
published_at: "2024-11-22T00:00:00Z"
tags: ["rce", "vulnerability-research"]
phying_url: "https://phying.com/item/8981"
lang: en
---

# [CVE-2024-46938] Leveraging An Order of Operations Bug to Achieve RCE in Sitecore 8.x - 10.x

## Summary

Local file disclosure in Sitecore 8.x to 10.x leads to RCE via CVE-2024-46938, an order of operations bug in path normalization.

## Intelligence Metadata

- **Sources:** slcyber.io
- **CVE:** CVE-2024-46938
- **Published:** 2024-11-22T00:00:00Z
- **Original:** https://www.slcyber.io/research/leveraging-an-order-of-operations-bug-to-achieve-rce-in-sitecore-8-x---10-x
- **Phying News:** https://phying.com/item/8981