Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/12/18 9:31 p.m.•16 views

EUVD-2025-204380

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS5.7AI score0.00297EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/18 8:15 p.m.•12 views

CVE-2019-25228

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS5.8AI score0.00297EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/18 8:15 p.m.•12 views

CVE-2019-25228

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS0.00297EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/18 7:53 p.m.•27 views

CVE-2019-25228

Kentico Xperience contains an information-disclosure vulnerability where virtual context URLs can be leaked to external domains via the HTTP Referer header during page-builder interactions and loading of links/images. Affected is Kentico Xperience (per CVE-2019-25228 and related records) with ref...

5.3CVSS5.9AI score0.00297EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/18 7:53 p.m.•7 views

CVE-2019-25228 Kentico Xperience <= 12.0.47 Virtual Context Information Disclosure

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS5.9AI score0.00297EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/18 7:53 p.m.•45 views

CVE-2019-25228 Kentico Xperience <= 12.0.47 Virtual Context Information Disclosure

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS0.00297EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•12 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience has a security vulnerability that can be exploited by an attacker to cause sensitive information to be exposed to an external domain...

5.3CVSS5.8AI score0.00297EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•1 views

CVE-2019-25228: Exposure of Sensitive System Information to an Unauthorized Control Sphere

An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and...

5.3CVSS5.7AI score0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder