Kentico Xperience Information Disclosure Vulnerability in Portal Engine Form Control

A vulnerability allowing information disclosure has been identified in Kentico Xperience versions through 12.0. This issue arises within the Portal Engine form control, where error messages can inadvertently reveal sensitive stack trace details. Such detailed error messages may expose internal system information and implementation specifics to unauthorized users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive internal information and implementation details, potentially aiding in further attacks.

Remediation

Users can apply the latest hotfix available for their Kentico Xperience version. Instructions for applying hotfixes can be found in the Kentico Xperience Documentation.