CVE-2024-58320

MEDIUM

Kentico Xperience < 13.0.159 - Information Disclosure

Title source: rule
STIX 2.1

Description

An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.

Scores

CVSS v3 5.3
EPSS 0.0007
EPSS Percentile 20.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-497
Status published
Products (1)
kentico/xperience < 13.0.159
Published Dec 18, 2025
Tracked Since Feb 18, 2026