critical9.8
CVE-2019-17392
Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled.
Impact
Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Sitefinity | from 9.1 before 9.1.6185 from 9.2 before 9.2.6276 from 10.0 before 10.0.6431 from 10.1 before 10.1.6542 from 10.2 through 10.2.6651 from 11.0 through 11.0.6739 |