Lucene search

Sitefinity Security Vulnerabilities - 2023

cve

CVE-2023-29375

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.

9.8CVSS

9.4AI Score

0.002EPSS

2023-04-10 03:15 PM

cve

CVE-2023-29376

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries.

5.4CVSS

5.1AI Score

0.001EPSS

2023-04-10 03:15 PM

cve

CVE-2023-6784

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.

4.7CVSS

4.7AI Score

0.001EPSS

2023-12-20 02:15 PM