Cryptography Vulnerability in Kentico Xperience Product by Kentico
CVE-2021-47712

6.9MEDIUM

Key Information:

Vendor

Kentico

Status
Vendor
CVE Published:
18 December 2025

What is CVE-2021-47712?

A cryptographic issue in Kentico Xperience exposes the application to potential URL hash value manipulation, leveraging existing hashing mechanisms. To mitigate this risk, a hotfix has been released, introducing an enhanced security layer that prevents the reuse of hash values and limits the chances of exploitation. Users are encouraged to apply this hotfix promptly to maintain the security integrity of their websites.

Affected Version(s)

Xperience 0 <= 12.0.102

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-47712 : Cryptography Vulnerability in Kentico Xperience Product by Kentico