Potential Use of the Sitefinity System for Distribution of Phishing Emails
CVE-2023-6784

4.7MEDIUM

Key Information:

Vendor
Progress Software
Status
Sitefinity
Vendor
CVE Published:
20 December 2023

Summary

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.

Affected Version(s)

Sitefinity 15.0

Sitefinity 15.0 < 15.0.8223

Sitefinity 14.4 < 14.4.8133

References

https://www.progress.com/sitefinity-cms
product
https://community.progress.com/s/article/Sitefinity-Secur...
vendor-advisory

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.