Information Disclosure Vulnerability in Kentico Xperience by Kentico
CVE-2022-50686

6.9MEDIUM

Key Information:

Vendor

Kentico

Status
Xperience
Vendor
CVE Published:
18 December 2025

What is CVE-2022-50686?

An information disclosure vulnerability in Kentico Xperience allows attackers to access sensitive stack trace information through error messages generated by the Portal Engine form control. This can inadvertently reveal internal system details to unauthorized users, potentially compromising the security and integrity of the affected application.

Affected Version(s)

Xperience 0 <= 12.0

References

https://devnet.kentico.com/download/hotfixes
vendor-advisorypatch
https://www.vulncheck.com/advisories/kentico-xperience-po...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kentico Security Team
JSON
.
CVE-2022-50686 : Information Disclosure Vulnerability in Kentico Xperience by Kentico