Progress Sitefinity Information Exposure Vulnerability

A vulnerability allowing information exposure through error messages has been identified in Progress Sitefinity. This issue affects versions 4.0 prior to 14.4.8142, 15.0.8200 through 15.0.8229, 15.1.8300 through 15.1.8327, and 15.2.8400 through 15.2.8421.

Impact

Exploitation of this vulnerability can lead to the unintentional disclosure of sensitive information through verbose error messages.

Remediation

Progress Sitefinity has released patches for all supported versions. Users are advised to update to the latest version. For instructions on how to apply the update, refer to the Progress Sitefinity Knowledge Base Article on updating Sitefinity to a patch.