CVE-2024-58320
An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration inte
An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.
MEDIUM · CVSS 5.3
EPSS 0.00044
Schedule remediation
- SSVC automatable: yes - attacks can be scripted at scale
Sigma rules0
YARA rules0