Описание
A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.
Уязвимые конфигурации
Конфигурация 1Версия до 12.0.102 (включая)
cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*
EPSS
Процентиль: 3%
0.00017
Низкий
7.5 High
CVSS3
Дефекты
CWE-327
Связанные уязвимости
CVSS3: 7.5
github
около 2 месяцев назад
A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.
EPSS
Процентиль: 3%
0.00017
Низкий
7.5 High
CVSS3
Дефекты
CWE-327