{"id":"CVE-2021-47712","aliases":["EUVD-2025-204349","GHSA-9jrm-mcr7-5p6m"],"status":"published","title":"Kentico Xperience \u003c= 12.0.102 URL Hashing Cryptography Vulnerability","description":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00236,"percentile":0.14631,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2025-12-18T19:53:26Z","modified":"2026-06-17T04:18:20Z","products":[{"vendor":"kentico","product":"xperience"}],"references":[{"url":"https://devnet.kentico.com/download/hotfixes","tags":["vendor-advisory","patch","Product"]},{"url":"https://www.vulncheck.com/advisories/kentico-xperience-url-hashing-cryptography-vulnerability","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47712"},{"url":"https://github.com/advisories/GHSA-9jrm-mcr7-5p6m"}],"sources":{"cve":[{"id":"CVE-2021-47712","title":"Kentico Xperience \u003c= 12.0.102 URL Hashing Cryptography Vulnerability","description":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.","status":"published","published":"2025-12-18T19:53:26.971Z","modified":"2025-12-18T21:48:02.746Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:32:55.905855Z"}],"euvd":[{"id":"EUVD-2025-204349","description":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.","status":"published","published":"2025-12-18T19:53:26Z","modified":"2025-12-18T21:48:02Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:49:02.571203Z"}],"ghsa":[{"id":"GHSA-9jrm-mcr7-5p6m","title":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL...","description":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.","status":"published","published":"2025-12-18T21:31:43Z","modified":"2025-12-18T21:31:51Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T15:05:16.915197Z"}],"nvd":[{"id":"CVE-2021-47712","description":"A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.","status":"published","published":"2025-12-18T20:15:49.81Z","modified":"2026-06-17T04:18:20.517Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:07:09.005706Z"}]}}