Critical · 9.8 CVE-2023-29375 EUVD-2023-32947GHSA-367q-63cf-925j

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, …

Published Apr 10, 2023 · Updated Feb 12, 2025 · Assigned by mitre

Description

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.

Advisories 1

WID-SEC-2023-0885 Progress Software Sitefinity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2023

References

https://www.progress.com/sitefinity-cms
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023

EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8