Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-1632

Incorrect access control in the Sitefinity backend

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation Sitefinity

Default version status: affected

  • 13.3.7600 to < 13.3.7649affected
  • 14.4.8100 to < 14.4.8135affected
  • 15.0.8200 to < 15.0.8227affected

References