Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:kentico:kentico:7.0.56:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2022-32387 |
In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler. Published: July 18, 2022; 1:15:09 PM -0400 |
V4.0:(not available) V3.1: 7.5 HIGH V2.0:(not available) |
CVE-2022-29287 |
Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current user. The exported XML contains every option of the exported user (even the hashed password). Published: April 15, 2022; 8:15:09 PM -0400 |
V4.0:(not available) V3.1: 4.9 MEDIUM V2.0: 4.0 MEDIUM |
CVE-2020-24794 |
Cross Site Scripting (XSS) vulnerability in Kentico before 12.0.75. Published: September 09, 2020; 11:15:11 AM -0400 |
V4.0:(not available) V3.1: 6.1 MEDIUM V2.0: 4.3 MEDIUM |