Lucene search
HistoryApr 10, 2023 - 3:15 p.m.
CVE-2023-29376
progress sitefinity
xss
privileged users
media libraries
cve-2023-29376
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
29.6%
An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries.
Affected configurations
Node
progresssitefinityRange13.3–13.3.7646
ORprogresssitefinityRange14.0–14.0.7736
ORprogresssitefinityRange14.1–14.1.7826
ORprogresssitefinityRange14.2–14.2.7930
ORprogresssitefinityRange14.3–14.3.8026
| Vendor | Product | Version | CPE |
|---|---|---|---|
| progress | sitefinity | * | cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2023-04-10 15:15:00
cvelist
cvelist
CVE-2023-29376
2023-04-10 00:00:00
cve
cve
CVE-2023-29376
2023-04-10 15:15:07
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
29.6%
Related for NVD:CVE-2023-29376