Vulnerability · Published Dec 18, 2025 · Assigned by VulnCheck
CVE-2021-47712Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability
High 7.5
In plain English
A high-severity broken cryptography in Xperience from Kentico. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 85.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.
Affected products (as reported)
Weakness: CWE-327 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- Kentico DevNet Hotfixes vendor-advisory, patch
- VulnCheck Advisory: Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability third-party-advisory