CVE-2024-58320
NoneCVSS
—
EPSS
0.3%
Published
Dec 18, 2025
CISA due date
—
The record
An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|