Описание
An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and link/image loading.
Уязвимые конфигурации
Конфигурация 1Версия до 12.0.47 (включая)
cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00036
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-497
Связанные уязвимости
CVSS3: 5.3
github
около 2 месяцев назад
An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and link/image loading.
EPSS
Процентиль: 10%
0.00036
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-497