PT-2025-52313 · Kentico · Kentico Xperience

Federico Girardi · Published 2025-12-18 · Updated 2025-12-19 · CVE-2023-53934

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Kentico Xperience (affected versions not specified)

Description A denial of service issue exists in Kentico Xperience. Attackers can leverage this to disrupt service availability by sending specially crafted requests to the GetResource handler. The root cause is improper input validation, which allows maliciously constructed requests to cause a denial of service. The affected API endpoint is /GetResource.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-97

Related Identifiers

CVE-2023-53934

Affected Products

Kentico Xperience

References · 5

• https://osv.dev/vulnerability/CVE-2023-53934 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53934 · Security Note
• https://twitter.com/CVEnew/status/2002117790359077188 · Twitter Post
• https://devnet.kentico.com/download/hotfixes · Patch, Vendor Advisory
• https://vulncheck.com/advisories/kentico-xperience-getresource-handler-denial-of-service · Note