1. Home
  2. CVE Database
  3. CVE-2021-47712
HIGH · 7.5

CVE-2021-47712

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to ...

Vulnerability Description

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
KenticoXperience<= 12.0.102

Related Weaknesses (CWE)

CWE-327

References

FAQ

What is CVE-2021-47712?

CVE-2021-47712 is a vulnerability with a CVSS score of 7.5 (HIGH). A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to ...

How severe is CVE-2021-47712?

CVE-2021-47712 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-47712?

Check the references section above for vendor advisories and patch information. Affected products include: Kentico Xperience.