CVE-2024-11625

State: Published
Severity: 7.7 High
Published: Jan 7, 2025
Updated: Jan 7, 2025
Reserved: Nov 22, 2024

Description

Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

Scores

CVSS	Score	Vector	Source
3.1	7.7 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L	ProgressSoftware

Weaknesses

CWE-209 Generation of Error Message Containing Sensitive Information

Affected Products

Product	Versions
SitefinityProgress Software Corporation	4.0 through 14.4.8142Affected 15.0.8200 through 15.0.8229Affected 15.1.8300 through 15.1.8327Affected 15.2.8400 through 15.2.8421Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.