Collected research
Cache Me If You Can: Sitecore Experience Platform Cache Poisoning to RCE
Uses restricted Sitecore reflection to invoke a control’s AddToCache method and poison a server-side rendering cache. Configuration analysis and metadata/count queries recover usable cache keys; a privileged reader can then trigger injected script and a post-authentication deserialization path. The chain depends on cache and API reachability settings.
Record
- Researcher
- Piotr Bazydlo
- Published by
- watchTowr
- Date
- Topic
- HTTP
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Piotr Bazydlo, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .