Medium WID-SEC-2023-3191 1 CVE

Progress Software Sitefinity: Schwachstelle ermöglicht Verbreitung von Phishing Mails

Published Dec 20, 2023 · Updated Dec 20, 2023 · de-DE

Vendor: Progress Software Product: Sitefinity Product: Sitefinity < 13.3.7648 Product: Sitefinity < 14.1.7828 Product: Sitefinity < 14.2.7932 Product: Sitefinity < 14.3.8029 Product: Sitefinity < 14.4.8133 Product: Sitefinity < 15.0.8223 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Progress Software Sitefinity ausnutzen, um Phishing Mails zu verbreiten.

Product

Progress Sitefinity ist eine .NET Web Content Management Plattform.

Vulnerabilities 1

Medium 4.7

CVE-2023-6784

Potential Use of the Sitefinity System for Distribution of Phishing Emails

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.

Progress Software Sitefinity

Dec 20, 2023

Revision history

2023-12-20 #1
Initiale Fassung

References

GitHub Advisory Database vom 2023-12-20
https://github.com/advisories/GHSA-xghf-952v-933j
Sitefinity Security Advisory vom 2023-12-20
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerability-CVE-2023-6784-December-2023