CVE-2024-11625

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-11625
Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

7.7 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025 Vendor Advisory
https://www.progress.com/sitefinity-cms Product
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*
cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*
cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*
cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*
History

29 Jul 2025, 19:35

Type Values Removed Values Added
First Time Progress
Progress sitefinity
Summary
  • (es) Vulnerabilidad de exposición de información a través de un mensaje de error en Sitefinity de Progress Software Corporation. Este problema afecta a Sitefinity: desde la versión 4.0 hasta la 14.4.8142, desde la versión 15.0.8200 hasta la 15.0.8229, desde la versión 15.1.8300 hasta la 15.1.8327, desde la versión 15.2.8400 hasta la 15.2.8421.
References () https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025 - () https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025 - Vendor Advisory
References () https://www.progress.com/sitefinity-cms - () https://www.progress.com/sitefinity-cms - Product
CPE cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*

07 Jan 2025, 09:15

Type Values Removed Values Added
References
  • () https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025 -
Summary (en) Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, 15.2.8400. (en) Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

07 Jan 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-07 08:15

Updated : 2025-07-29 19:35

NVD link : CVE-2024-11625

Mitre link : CVE-2024-11625

CVE.ORG link : CVE-2024-11625

JSON object : View

Products Affected

progress

  • sitefinity
CWE
CWE-209

Generation of Error Message Containing Sensitive Information