CVE-2023-6784

Published: Dec 20, 2023Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.

Affected (6)

Products: Progress: Sitefinity

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Progress Sitefinity	14.1 ≤ version < 14.1.7828
Progress Sitefinity	14.2 ≤ version < 14.2.7932
Progress Sitefinity	14.3 ≤ version < 14.3.8029
Progress Sitefinity	14.4 ≤ version < 14.4.8133
Progress Sitefinity	15.0 ≤ version < 15.0.8223
Progress Sitefinity	4.0 ≤ version < 13.3.7648

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerability-CVE-2023-6784-December-2023

Source: security@progress.com

Vendor Advisory

https://www.progress.com/sitefinity-cms

Source: security@progress.com

Product

https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerability-CVE-2023-6784-December-2023

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.progress.com/sitefinity-cms

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.