Description

Kentico CMS is an ASP.NET web content management system.

The Staging API is used to replicate data between production and development systems. If an attacker has valid credentials for the API, they can get full access to the system.

Remediation

Restrict access to the Staging API

References

Content staging

Related Vulnerabilities

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.8)

WordPress Plugin Total Upkeep-WordPress Backup plus Restore & Migrate by BoldGrid Information Disclosure (1.14.9)

WordPress Plugin Breadcrumb NavXT Information Disclosure (6.1.0)

Sitecore Arbitrary File Read (CVE-2024-46938)

Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration