Description (CNA)
An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kentico / Xperience | affected 0 through 13.0.159 |
CWE
CWE-497
References
- https://devnet.kentico.com/download/hotfixes
- https://www.vulncheck.com/advisories/kentico-xperience-authentication-information-disclosure
ADP enrichment
No English description supplied.
No references supplied.