CVE-2019-25230 MEDIUM

CVE-2019-25230: Kentico Xperience <= 12.0.0 User Widget Information Disclosure

Vendor Kentico
Product Xperience
Weakness CWE-497
Published December 18, 2025
Last update December 27, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls.

Key dates

02Disclosure timeline

December 18, 2025 CVE published
December 27, 2025 Record updated