We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining potentially sensitive information. Exploitation can occur if Anonymous access is enabled, or if there is a successful CSRF attack.
Reserved 2025-05-03 | Published 2025-05-03 | Updated 2025-05-05 | Assigner mitreCWE-288 Authentication Bypass Using an Alternate Path or Channel
seclists.org/fulldisclosure/2025/Apr/30
docs.inedo.com/docs/proget/installation/installation-guide
my.inedo.com/downloads/installers?product=ProGet
Support options
