CVE-2024-11625

published 2025-01-07

CVE-2024-11625: Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through…

Priority P4 25 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
progress	sitefinity	>= 15.0.8200 < 15.0.8230	15.0.8230
progress	sitefinity	>= 15.1.8300 < 15.1.8328	15.1.8328
progress	sitefinity	>= 15.2.8400 < 15.2.8422	15.2.8422
progress	sitefinity	>= 4.0 < 14.4.8143	14.4.8143
progress_software_corporation	sitefinity	15.0.8200 – 15.0.8229	—
progress_software_corporation	sitefinity	15.1.8300 – 15.1.8327	—
progress_software_corporation	sitefinity	15.2.8400 – 15.2.8421	—
progress_software_corporation	sitefinity	4.0 – 14.4.8142	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-209