Kentico Xperience Denial-of-Service Vulnerability via Unsafe Reflection

A denial-of-service vulnerability has been identified in Kentico Xperience versions through 13.0.180. This vulnerability allows an unauthenticated attacker to terminate the current process, causing a disruption in service.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users can upgrade to Kentico Xperience version 13.0.181 or later, where this vulnerability has been addressed. Instructions for applying hotfixes are available in the Kentico Xperience documentation.