{"id":"CVE-2021-47712","state":"PUBLISHED","title":"Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability","description":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.","publishedAt":"2025-12-18T19:53:26.971Z","updatedAt":"2025-12-18T21:48:02.746Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Kentico Xperience"],"affected":[{"vendor":"Kentico","product":"Xperience","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.102","versionType":"custom"}]}],"references":["https://devnet.kentico.com/download/hotfixes","https://www.vulncheck.com/advisories/kentico-xperience-url-hashing-cryptography-vulnerability"],"weaknesses":["CWE-327"],"ingestedAt":"2026-10-29T19:49:19.404Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/47xxx/CVE-2021-47712.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2021-47712","state":"PUBLISHED","datePublished":"2025-12-18T19:53:26.971Z","dateUpdated":"2025-12-18T21:48:02.746Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2025-12-05T19:10:29.046Z"},"containers":{"cna":{"title":"Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability","descriptions":[{"lang":"en","value":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation."}],"affected":[{"vendor":"Kentico","product":"Xperience","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.102","versionType":"custom"}]}],"references":[{"url":"https://devnet.kentico.com/download/hotfixes","name":"Kentico DevNet Hotfixes","tags":["vendor-advisory","patch"]},{"url":"https://www.vulncheck.com/advisories/kentico-xperience-url-hashing-cryptography-vulnerability","name":"VulnCheck Advisory: Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":6.9,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-327","lang":"en","description":"Use of a Broken or Risky Cryptographic Algorithm","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2025-12-18T19:53:26.971Z"},"datePublic":"2023-07-03T00:00:00.000Z","x_generator":{"engine":"vulncheck"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*","versionEndIncluding":"12.0.102","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-18T21:08:25.766329Z","id":"CVE-2021-47712","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-18T21:48:02.746Z"}}]}}}