Описание
An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls.
Уязвимые конфигурации
Конфигурация 1Версия до 12.0 (включая)
cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00035
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-497
Связанные уязвимости
CVSS3: 4.3
github
около 2 месяцев назад
An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls.
EPSS
Процентиль: 10%
0.00035
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-497