CVE-2019-10068: Kentico Xperience Deserialization of Untrusted Data Vulnerability

CVE ID

CVE-2019-10068

Vulnerability Name

Kentico Xperience Deserialization of Untrusted Data Vulnerability

• Project: Kentico
• Product: Xperience

Date

• Date Added: 2022-03-25
• Due Date: 2022-04-15

Description

Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-10068

Related Security News

• FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

More CVEs Info

Common Vulnerabilities & Exposures (CVE) List