Description
Kentico Xperience13 是一款功能强大的内容管理系统（CMS），广泛应用于企业网站和数字体验管理。该系统存在文件读取漏洞（CVE-2025-0011），攻击者可以利用该漏洞绕过权限验证，读取系统中的敏感文件，从而导致信息泄露和潜在的安全风险。
Kentico Xperience13 /cms/admin 文件读取漏洞 （CVE-2025-0011）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/binarywarm/kentico-xperience13-AuthBypass-CVE-2025-0011
https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/
https://radicalnotion.ai/blog/cisa-kev-kentico-cms-bug-gives-attackers-admin-access-without-a-password-20251218171344
https://gbhackers.com/kentico-xperience-cms-vulnerability/
https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code
https://www.tenable.com/plugins/nessus/271230
https://simplea.com/blog/legacy-kentico-versions
https://docs.kentico.com/documentation/security-advisories
https://nvd.nist.gov/vuln/detail/CVE-2025-2746