Kentico Security Vulnerabilities (CVE)
Explore vulnerabilities and security advisories affecting Kentico products.
26 known CVE vulnerabilities tracked
Vulnerabilities By Year
Products Affected
All Kentico CVEs
An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC form file uploader components. Attackers can manipulate file names and upload potentially malicious files to the system, enabling unauthorized
An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and link/ima