CVE-2024-4882

EUVD-2024-44452
The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ProgressSoftwareCNA
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
progresssitefinity
𝑥
< 15.1.8322.0
CNA
Common Weakness Enumeration
References
https://community.progress.com/s/article/Open-Redirect-vulnerability-CVE-2024-4882
https://www.progress.com/sitefinity-cms
https://community.progress.com/s/article/Open-Redirect-vulnerability-CVE-2024-4882
https://www.progress.com/sitefinity-cms