Skip to content
OpenAdvisories
High · 8.8 CVE-2024-1632 EUVD-2024-17371GHSA-2q6p-h6rg-vx7w

Incorrect access control in the Sitefinity backend

Published Feb 28, 2024 · Updated Aug 2, 2024 · Assigned by ProgressSoftware

Vendor: Progress Software Product: Sitefinity

Description

Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.

Affected products

VendorProductAffectedFixed
Progress Software Sitefinity 13.3.7600 – < 13.3.7649, 14.4.8100 – < 14.4.8135, 15.0.8200 – < 15.0.8227 13.3.7649

Advisories 1

References