CVE-2025-32370

概要

参考情報

• devnet.kentico.com/download/hotfixes · Release Notes
• labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748 · Exploit

xperience のその他の脆弱性

• CVE-2025-5591中 5.4Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to hijack a victim use…
• CVE-2024-58323中 5.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Checkbox form componen…
• CVE-2024-58322中 5.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options configurati…
• CVE-2024-58321中 5.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form validation rule confi…
• CVE-2024-58320中 5.3An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname detai…