medium5.4
CVE-2023-29376
An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3…
Impact
An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Sitefinity | from 13.3 before 13.3.7646 from 14.0 before 14.0.7736 from 14.1 before 14.1.7826 from 14.2 before 14.2.7930 from 14.3 before 14.3.8026 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023
- https://www.progress.com/sitefinity-cms
- https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023
- https://www.progress.com/sitefinity-cms