| Package | Affected versions | Patched versions |
|---|---|---|
| rocks | < 2.1.149 | 2.1.149 |
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free