VULNERABILITY INTELLIGENCE

CVE-2019-25230

CVSS score4.3 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-12-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls.

Weakness classification

  • disclosure@vulncheck.com: CWE-497

Primary references