CVE-2022-50686: Kentico Xperience <= 12.0 Portal Engine Form Control Information Disclosure
An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive stack trace details via Portal Engine form control error messages. Detailed error messages can expose internal system information and potentially reveal implementation details to unauthorized users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50686?
CVE-2022-50686 is rated as a medium severity information disclosure vulnerability in Kentico Xperience.
How do I fix CVE-2022-50686?
To fix CVE-2022-50686, you should apply the latest patches and updates provided by Kentico for the Xperience product.
What type of information is exposed in CVE-2022-50686?
CVE-2022-50686 exposes sensitive stack trace details that may include internal system information.
Who is affected by CVE-2022-50686?
CVE-2022-50686 affects applications running Kentico Xperience version 12.0 and below.
Can CVE-2022-50686 lead to further attacks?
Yes, the information disclosed in CVE-2022-50686 could be leveraged by attackers to plan further attacks on the system.