Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in Progress Software Sitefinity ausnutzen, um Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.
Product
Progress Sitefinity ist eine .NET Web Content Management Plattform.
Vulnerabilities 2
-
High 8.4
Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scr…
-
High 7.7
Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affe…
Revision history
-
#1
Initiale Fassung
References
-
Sitefinity Security Advisory vom 2025-01-06
https://community.progress.com/s/article/ka7Pb000000QKUXIA4
-
CVE Record Information vom 2025-01-06
https://www.cve.org/CVERecord?id=CVE-2024-11625
-
CVE Record Information vom 2025-01-06
https://www.cve.org/CVERecord?id=CVE-2024-11626