CVE-2023-29375

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-04-10

Last modified

2025-02-12

Weaknesses

CWE-434

Affected products

• Sitefinity (Progress)

References

• https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023
• https://www.progress.com/sitefinity-cms