651 matches found
Design/Logic Flaw
In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...
CVE-2022-32387
In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...
CVE-2022-32387
CVE-2022-32387 affects Kentico prior to version 13.0.66. An attacker can trigger a Denial of Service by sending a crafted request to the GetResource handler. The provided documents confirm the vulnerability in Kentico’s GetResource processing and indicate a DoS impact, with CVSS v3.1 base score 7...
CVE-2022-32387: Undefined Security Weakness
In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler...
PT-2022-21285
Name of the Vulnerable Software and Affected Versions Kentico versions prior to 13.0.66 Description The issue allows attackers to achieve Denial of Service via a crafted request to the "GetResource handler". Recommendations For versions prior to 13.0.66, update to version 13.0.66 or later to...
Kentico 安全漏洞
Kentico is an ASP.NET-based content management system CMS from Kentico, Inc. A security vulnerability exists in Kentico versions prior to 13.0.66, which can be exploited by an attacker to cause a denial of service via a specially crafted request to the GetResource handler...
CVE-2022-29287
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...
CVE-2022-29287
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...
CVE-2022-29287
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...
Design/Logic Flaw
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...
Kentico CMS has an unspecified vulnerability
Kentico is the United States Kentico company's set of ASP.NET-based content management system CMS. A security vulnerability exists in Kentico CMS before 13.0.66, which can be exploited by an attacker with user administrative privileges administrator by default to export any user's user options,...
Kentico 安全漏洞
Kentico is the United States Kentico company's set of ASP.NET-based content management system CMS. A security vulnerability exists in Kentico CMS before 13.0.66, which can be exploited by an attacker with user administrative privileges administrator by default to export any user's user options,...
CVE-2022-29287
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...
CVE-2022-29287
CVE-2022-29287 affects Kentico CMS before 13.0.66, where a user with management rights (default Administrator) can export the options of any user, including higher-privileged accounts (e.g., Global Administrators). The exported XML can include every option of the targeted user, including the hash...
PT-2022-19523
Name of the Vulnerable Software and Affected Versions Kentico CMS versions prior to 13.0.66 Description The issue allows an attacker with user management rights, such as an Administrator, to export the user options of any user, including those with higher privileges like Global Administrators. Th...
CVE-2022-29287: Authorization Bypass Through User-Controlled Key
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...
VulnCheck KEV: CVE-2019-10068
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution...
Kentico Xperience Deserialization of Untrusted Data Vulnerability
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution...
Kentico Cross-Site Scripting Vulnerability (CNVD-2022-03949)
A cross-site scripting vulnerability exists in Kentico Xperience, an ASP.NET-based content management system CMS from Kentico U.S. The vulnerability stems from the fact that the product's media subsystem does not validate input data. An attacker could cause client-side code execution via XML...