Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled.
CPE | Name | Operator | Version |
---|---|---|---|
sitefinity | ge | 12.1 | |
sitefinity | le | 12.1.7128 | |
sitefinity | ge | 12.0 | |
sitefinity | le | 12.0.7032 | |
sitefinity | ge | 11.2 | |
sitefinity | le | 11.2.6934 | |
sitefinity | ge | 11.1 | |
sitefinity | le | 11.1.6828 | |
sitefinity | ge | 11.0 | |
sitefinity | le | 11.0.6739 |