CVE-2024-58317 — Kentico Xperience <= 13.0.164 Cookie Security Configuration
A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when setting administration cookies via web.config. The vulnerabil…
Published: 2025-12-18 · CVSS: 6.9 · CVSS 4.0
A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when setting administration cookies via web.config. The vulnerability affects .NET Framework projects by incorrectly handling the 'requireSSL' attribute, potentially compromising session security and authentication state.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7