Kentico Xperience Information Disclosure Vulnerability in User Widget

A vulnerability allowing information disclosure exists in Kentico Xperience versions through 12.0.0. This issue allows authenticated users to access sensitive system objects via the live site widget properties dialog. The vulnerability arises from inadequate access controls, enabling unauthorized access to system information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system information.

Remediation

Users can apply the latest hotfix available for their Kentico Xperience version. Instructions for applying hotfixes can be found in the Kentico Xperience Documentation.