An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user privileges via unauthorized requests. Attackers could potentially compromise glob…
High CVSS 7.2
Summary
An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user privileges via unauthorized requests. Attackers could potentially compromise global administrator accounts and invalidate security-sensitive macros by manipulating user privilege levels.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://devnet.kentico.com/download/hotfixes Product
- https://www.vulncheck.com/advisories/kentico-xperience-administrator-access-control-bypass Third Party Advisory
Timeline
- nvd_ingest NVD