CVE-2024-58320 — Kentico Xperience <= 13.0.159 Authentication Information Disclosure
An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers c…
Published: 2025-12-18 · CVSS: 6.9 · CVSS 4.0
An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7