Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-chq4-5285-wpm4

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.

An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.

EPSS

Процентиль: 23%
0.00076
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-497

Связанные уязвимости

CVSS3: 5.3
nvd
около 2 месяцев назад

An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.

EPSS

Процентиль: 23%
0.00076
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-497