Medium WID-SEC-2025-1053 1 CVE

Progress Software Sitefinity: Schwachstelle ermöglicht Denial of Service

Published May 14, 2025 · Updated May 14, 2025 · de-DE

Vendor: Progress Software Product: Sitefinity Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Progress Software Sitefinity ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Progress Sitefinity ist eine .NET Web Content Management Plattform.

Vulnerabilities 1

High 7.5

CVE-2025-3600 EPSS 26%

Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service.

Progress Software Telerik UI for ASP.NET AJAX

May 14, 2025

Revision history

2025-05-14 #1
Initiale Fassung

References

Telerik Security Advisory vom 2025-05-14
https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-unsafe-reflection-cve-2025-3600
GitHub Advisory Database vom 2025-05-14
https://github.com/advisories/GHSA-8g7p-xh7p-947j
Sitefinity Security Advisory vom 2025-05-14
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerability-CVE-2025-3600-May-2025