CVE-2023-29375

CRÍTICO 9.8CVE-2023-29375 · Published 10/04/2023 · updated 17/06/2026

En resumen

CVE-2023-29375 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a sitefinity (progress).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.82%, mayor que el 57.3% de las vulnerabilidades.
Solución: actualizar a 13.3.7646, 14.0.7736, 14.1.7826, 14.2.7930 o posterior.

Package	Affected versions	Patched versions
sitefinity progress	`≥ 13.3, < 13.3.7646≥ 14.0, < 14.0.7736≥ 14.1, < 14.1.7826≥ 14.2, < 14.2.7930≥ 14.3, < 14.3.8026`	`13.3.764614.0.773614.1.782614.2.793014.3.8026`

Description

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.

References

community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023 · Vendor Advisory
progress.com/sitefinity-cms · Product

Más vulnerabilidades de sitefinity

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sitefinity

progress

≥ 13.3, < 13.3.7646≥ 14.0, < 14.0.7736≥ 14.1, < 14.1.7826≥ 14.2, < 14.2.7930≥ 14.3, < 14.3.8026

13.3.764614.0.773614.1.782614.2.793014.3.8026

Más vulnerabilidades de sitefinity

Ver todo →