Description (CNA)
A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kentico / Xperience | affected 0 through 12.0.102 |
CWE
CWE-327
References
- https://devnet.kentico.com/download/hotfixes
- https://www.vulncheck.com/advisories/kentico-xperience-url-hashing-cryptography-vulnerability
ADP enrichment
No English description supplied.
No references supplied.