CVE-2024-11625: High severity progress software sitefinity vulnerability

Q: What is the severity of CVE-2024-11625?

CVE-2024-11625 has a medium severity rating due to information exposure risks.

Q: How do I fix CVE-2024-11625?

To fix CVE-2024-11625, upgrade your Sitefinity installation to a version that is not affected, such as versions 15.2.8422 or later.

Q: What versions of Sitefinity are affected by CVE-2024-11625?

CVE-2024-11625 affects Sitefinity versions from 4.0 through 14.4.8142 and several versions in the 15.x series.

Q: What type of vulnerability is CVE-2024-11625?

CVE-2024-11625 is classified as an Information Exposure Through an Error Message vulnerability.

Q: Who is the vendor associated with CVE-2024-11625?

The vendor associated with CVE-2024-11625 is Progress Software Corporation.

Published Jan 7, 2025

Updated

Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

Affected Software

5 affected components

Progress Software Sitefinity>=4.0<=14.4.8142, >=15.0.8200<15.0.8229, >=15.1.8300<15.1.8327, >=15.2.8400<15.2.8421

Progress Sitefinity>=4.0<14.4.8143

Progress Sitefinity>=15.0.8200<15.0.8230

Progress Sitefinity>=15.1.8300<15.1.8328

Progress Sitefinity>=15.2.8400<15.2.8422

Event History

Jan 7, 2025

CVE Published

via MITRE·07:48 AM

Data Sourced

via MITRE·07:48 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-11625?

CVE-2024-11625 has a medium severity rating due to information exposure risks.

How do I fix CVE-2024-11625?

To fix CVE-2024-11625, upgrade your Sitefinity installation to a version that is not affected, such as versions 15.2.8422 or later.

What versions of Sitefinity are affected by CVE-2024-11625?