CVE-2023-6784

Potential Use of the Sitefinity System for Distribution of Phishing Emails

State: Published
Severity: 4.7 Medium
Published: Dec 20, 2023
Updated: Nov 27, 2024
Reserved: Dec 13, 2023

Description

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N	ProgressSoftware

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
SitefinityProgress Software Corporation	15.0 to before 15.0.8223Affected 14.4 to before 14.4.8133Affected 14.3 to before 14.3.8029Affected 14.2 to before 14.2.7932Affected 14.1 to before 14.1.7828Affected 13.3 to before 13.3.7648Affected

References

https://www.progress.com/sitefinity-cmsproduct
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerability-CVE-2023-6784-December-2023vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.