Description
An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC form file uploader components. Attackers can manipulate file names and upload potentially malicious files to the system, enabling unauthorized file uploads.
References (2)
Core 2
Core References
Product vendor-advisory
patch
https://devnet.kentico.com/download/hotfixes
Third Party Advisory third-party-advisory
https://www.vulncheck.com/advisories/kentico-xperience-mvc-forms-unrestricted-file-upload
Scores
CVSS v3
8.8
EPSS
0.0007
EPSS Percentile
20.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-434
Status
published
Products (1)
kentico/xperience
< 12.0.29
Published
Dec 18, 2025
Tracked Since
Feb 18, 2026