# \#feedback

**URL:** https://community.emergingthreats.net/tag/feedback/38.md

[Latest](https://community.emergingthreats.net/latest.md) · [Categories](https://community.emergingthreats.net/categories.md) · [Tags](https://community.emergingthreats.net/tags.md)

---

## [PCRE in Sitecore CMS CSRFTOKEN Deserialization sid:2061119 for CVE-2019-9874](https://community.emergingthreats.net/t/pcre-in-sitecore-cms-csrftoken-deserialization-sid-2061119-for-cve-2019-9874/2575)

<div class="topic-metadata">

**Author:** [@rampage](https://community.emergingthreats.net/u/rampage)\
**Replies:** 1\
**Last updated:** [March 27, 2025, 6:28pm UTC](https://community.emergingthreats.net/t/pcre-in-sitecore-cms-csrftoken-deserialization-sid-2061119-for-cve-2019-9874/2575 "2025-03-27T18:28:45Z")

</div>

Hi, Friends! The PoC payload snippet disclosed in https://www.synacktiv.com/ressources/advisories/Sitecore\_CSRF\_deserialize\_RCE.pdf is a base64 encoded string. “\_\_CSRFTOKEN=/wEysRIAAQAAAP////8BAAAAAAAAAAwCAAAASVN5c3Rlb…

---

## [MITRE ATT&CK Additions/Modifications - A Community Discussion](https://community.emergingthreats.net/t/mitre-att-ck-additions-modifications-a-community-discussion/1753)

<div class="topic-metadata">

**Author:** [@James](https://community.emergingthreats.net/u/James)\
**Replies:** 0\
**Last updated:** [June 23, 2024, 10:33am UTC](https://community.emergingthreats.net/t/mitre-att-ck-additions-modifications-a-community-discussion/1753 "2024-06-23T10:33:16Z")

</div>

Hey folks, I am in the process of populating our internal tooling with as much relevant MITRE ATT&CK (enterprise-attack for now) metadata as possible so that we can flesh out existing rules as well as our new rules with…