Lucene search
K

7 matches found

EUVD
EUVD
added 2025/12/18 9:31 p.m.1 views

EUVD-2025-204380

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS5.7AI score0.0004EPSS
Exploits0References3
NVD
NVD
added 2025/12/18 8:15 p.m.2 views

CVE-2019-25228

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS0.0004EPSS
Exploits0References2
OSV
OSV
added 2025/12/18 8:15 p.m.1 views

CVE-2019-25228

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References2
CVE
CVE
added 2025/12/18 7:53 p.m.5 views

CVE-2019-25228

Kentico Xperience contains an information-disclosure vulnerability where virtual context URLs can be leaked to external domains via the HTTP Referer header during page-builder interactions and loading of links/images. Affected is Kentico Xperience (per CVE-2019-25228 and related records) with ref...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 7:53 p.m.2 views

CVE-2019-25228 Kentico Xperience <= 12.0.47 Virtual Context Information Disclosure

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/18 7:53 p.m.22 views

CVE-2019-25228 Kentico Xperience <= 12.0.47 Virtual Context Information Disclosure

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS0.0004EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.1 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience has a security vulnerability that can be exploited by an attacker to cause sensitive information to be exposed to an external domain...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References2
Rows per page
Query Builder