CVE-2021-47712 MEDIUM

CVE-2021-47712: Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability

Vendor Kentico
Product Xperience
Weakness CWE-327 · Broken crypto
Published December 18, 2025
Last update December 18, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.

Key dates

02Disclosure timeline

December 18, 2025 CVE published
December 18, 2025 Record updated