Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-92931

CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software @progress/sitefinity-nextjs-sdk

Default version status: unaffected

  • 15.1.8326 to < 15.4.8638affected

References