Open Redirect in Progress Software Corporation Sitefinity

CVE-2024-4882

The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.

Vulnerability class: Open Redirect

EPSS: 0.004 (30.3th percentile) — read the EPSS interpretation.

Affected products

Progress Software Corporation Sitefinity — versions 0

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

security@progress.com (product)
security@progress.com (vendor-advisory)