---
id: 9011
title: "Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3"
source_domain: slcyber.io
source_url: "https://www.slcyber.io/research/bypass-iis-authorisation-with-this-one-weird-trick-three-rces-and-two-auth-bypasses-in-sitecore-9-3"
published_at: "2023-05-10T00:00:00Z"
tags: ["rce", "vulnerability-research", "microsoft", "iis", "auth-bypass"]
phying_url: "https://phying.com/item/9011"
lang: en
---

# Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3

## Summary

# Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3 Get research alerts Share on social May 10, 2023 17 min read ### Table of Contents TOC...

## Intelligence Metadata

- **Sources:** slcyber.io
- **Published:** 2023-05-10T00:00:00Z
- **Original:** https://www.slcyber.io/research/bypass-iis-authorisation-with-this-one-weird-trick-three-rces-and-two-auth-bypasses-in-sitecore-9-3
- **Phying News:** https://phying.com/item/9011