Kentico 漏洞列表

Kentico CMS 8.2 contains an open redirect vulnerability via GetDocLink.ashx with link variable. An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain.

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard.

Kentico CMS is susceptible to remote code execution via a .NET deserialization vulnerability.

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.

Kentico CMS 8.2 contains an open redirect vulnerability via GetDocLink.ashx with link variable. An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain.

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard.

Kentico CMS is susceptible to remote code execution via a .NET deserialization vulnerability.

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178.

A security issue exists in Kentico Xperience 13 (before Hotfix 173) when the Staging Service is enabled with username/password authentication. This vulnerability may allow unauthorized access or misuse of staging functionality.

Before Kentico Xperience 13 Hotfix 173, this vulnerability can be exploited with any username provided. For Hotfix >= 173 and < 178, this vulnerability can be exploited only if you provide a valid Staging Service username (default: admin)

Kentico Xperience13 是一款功能强大的内容管理系统（CMS），广泛应用于企业网站和数字体验管理。该系统存在文件读取漏洞（CVE-2025-0011），攻击者可以利用该漏洞绕过权限验证，读取系统中的敏感文件，从而导致信息泄露和潜在的安全风险。

9.0.51之前的Kentico9.0和10.0.48之前的10.0易受特权升级攻击。攻击者可以通过访问CMSInstall/install.aspx，然后导航到CMS管理面板来获得全局管理员访问权限

【漏洞对象】Kentico 【涉及版本】CMS 7.0.75 PublicMessageUserSelector.aspx 【漏洞描述】此漏洞是站点上的一个未受保护的页面，您可以在其中查看 所有当前用户和用户名。 找出Kentico CMS是否易受攻击