Information Disclosure in Kentico Xperience Affects Public User Authentication

CVE-2024-58320

What is CVE-2024-58320?

An information disclosure vulnerability exists in Kentico Xperience, enabling unauthorized public access to sensitive hostname details during user authentication. This flaw allows attackers to exploit a public endpoint to gather confidential hostname configuration information, potentially revealing internal network details and increasing the risk of further attacks on the system.

References