Open Redirect in Progress Software Corporation Sitefinity

CVE-2024-4882

The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.

Vulnerability class: Open Redirect

Published 2024-07-08 · last modified 2026-06-17.

EPSS exploit prediction

EPSS: 0.004 (29.9th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 30th percentile — 29.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Progress Software Corporation Sitefinity — versions 0

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

www.progress.com/sitefinity-cms (product)
community.progress.com/s/article/Open-Redirect-vulnerability-CVE-2024-4882 (vendor-advisory)