An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files.
| Software | From | Fixed in |
|---|---|---|
| sitecore / experience_commerce | 8.0 | 10.4.x |
| sitecore / experience_platform | 8.0 | 10.4.x |
| sitecore / experience_manager | 8.0 | 10.4.x |