CVE-2023-53934 HIGH

CVE-2023-53934: Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service

Vendor Kentico
Product Xperience
Weakness CWE-97
Published December 18, 2025
Last update December 18, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests.

Key dates

02Disclosure timeline

December 18, 2025 CVE published
December 18, 2025 Record updated