Description
An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kentico | Xperience | ≤ 13.0.159 | — |
References
- Kentico DevNet Hotfixes vendor-advisory patch
- VulnCheck Advisory: Kentico Xperience <= 13.0.159 Authentication Information Disclosure third-party-advisory