Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-1968

Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs (Session Replay

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs (Session Replay Attacks).This issue affects Sitefinity: from 14.0 through 14.3, from 14.4 before 14.4.8145, from 15.0 before 15.0.8231, from 15.1 before 15.1.8332, from 15.2 before 15.2.8429.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation Sitefinity

Default version status: unaffected

  • 14.0 to ≤ 14.3affected
  • 14.4 to < 14.4.8145affected
  • 15.0 to < 15.0.8231affected
  • 15.1 to < 15.1.8332affected
  • 15.2 to < 15.2.8429affected

References