CVE-2024-11627

published 2025-01-07

CVE-2024-11627: : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142…

Priority P3 40 high 8.1 CVSS 3.1

AV N AC L PR N UI R S U C H I H A N

: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
progress	sitefinity	>= 15.0.8200 < 15.0.8230	15.0.8230
progress	sitefinity	15.0.8200 – 15.0.8229	—
progress	sitefinity	>= 15.1.8300 < 15.1.8328	15.1.8328
progress	sitefinity	15.1.8300 – 15.1.8327	—
progress	sitefinity	>= 15.2.8400 < 15.2.8422	15.2.8422
progress	sitefinity	15.2.8400 – 15.2.8421	—
progress	sitefinity	>= 4.0 < 14.4.8143	14.4.8143
progress	sitefinity	4.0 – 14.4.8142	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-613