Threats tagged 'ghsa-h4vh-mhxh-6rrr'

Kentico Xperience through version 13.0.172 contains an authentication bypass vulnerability in its Staging Sync Server. The flaw arises from improper password handling of empty SHA1 usernames in digest authentication, allowing attackers to bypass authentication and gain control over administrative objects. The vulnerability has a critical CVSS score of 9.8.