CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-29375

CVSS 9.8v3.1pub. 2023-04-10upd. 2025-02-12

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Progress Sitefinity

    APP
    Progress
    13.3 – 13.3.7646 (excl.)14.0 – 14.0.7736 (excl.)14.1 – 14.1.7826 (excl.)14.2 – 14.2.7930 (excl.)14.3 – 14.3.8026 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2017-9248CRITICAL9.8⚠ KEVPL ✓same product

Słaba ochrona kryptograficzna w Telerik UI for ASP.NET AJAX i Sitefinity

CVE-2026-7198CRITICAL9.8PL ✓same product

Obejście uwierzytelnienia w Progress Sitefinity — pełny dostęp bez logowania

CVE-2026-7312CRITICAL10.0PL ✓same product

Progress Sitefinity: ujawnienie danych uwierzytelniających w usługach web

CVE-2019-17392CRITICAL9.8PL ✓same product

Słaby mechanizm odzyskiwania hasła w Progress Sitefinity 12.1

CVE-2017-15883CRITICAL9.8PL ✓same product

Progress Sitefinity – ominięcie uwierzytelniania przez słabą kryptografię