Description
A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kentico | Xperience | ≤ 12.0.102 | — |
References
- Kentico DevNet Hotfixes vendor-advisory patch
- VulnCheck Advisory: Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability third-party-advisory