{"id":"CVE-2023-53934","aliases":["EUVD-2025-204344","GHSA-cxwj-5fh2-c47j"],"status":"published","title":"Kentico Xperience \u003c= 12.0.98 GetResource Handler Denial of Service","description":"A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00427,"percentile":0.37356,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-97"],"published":"2025-12-18T19:53:32Z","modified":"2026-06-17T06:46:22Z","products":[{"vendor":"kentico","product":"xperience"}],"references":[{"url":"https://devnet.kentico.com/download/hotfixes","tags":["vendor-advisory","patch","Product"]},{"url":"https://www.vulncheck.com/advisories/kentico-xperience-getresource-handler-denial-of-service","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53934"},{"url":"https://github.com/advisories/GHSA-cxwj-5fh2-c47j"}],"sources":{"cve":[{"id":"CVE-2023-53934","title":"Kentico Xperience \u003c= 12.0.98 GetResource Handler Denial of Service","description":"A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests.","status":"published","published":"2025-12-18T19:53:32.524Z","modified":"2025-12-18T21:47:23.467Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-97"],"updated_at":"2026-11-02T14:35:31.657022Z"}],"euvd":[{"id":"EUVD-2025-204344","description":"A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests.","status":"published","published":"2025-12-18T19:53:32Z","modified":"2025-12-18T21:47:23Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:49:02.571203Z"}],"ghsa":[{"id":"GHSA-cxwj-5fh2-c47j","title":"A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via...","description":"A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests.","status":"published","published":"2025-12-18T21:31:43Z","modified":"2025-12-18T21:31:50Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-97"],"updated_at":"2026-11-02T15:05:16.915197Z"}],"nvd":[{"id":"CVE-2023-53934","description":"A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests.","status":"published","published":"2025-12-18T20:15:51.53Z","modified":"2026-06-17T06:46:22.137Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-97"],"updated_at":"2026-11-02T14:09:26.50087Z"}]}}