CVE-2021-47712

HIGH

Kentico Xperience < 12.0.102 - Cryptographic Hash Manipulation via URL Hashing Mechanism

Title source: llm

Description

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.

References (2)

Core 2

Core References

Product vendor-advisory patch

https://devnet.kentico.com/download/hotfixes

Third Party Advisory third-party-advisory

https://www.vulncheck.com/advisories/kentico-xperience-url-hashing-cryptography-vulnerability

Scores

CVSS v3 7.5

EPSS 0.0020

EPSS Percentile 9.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-327

Status published

Products (1)

kentico/xperience < 12.0.102

Published Dec 18, 2025

Tracked Since Feb 18, 2026