Firetruck

CVE-2025-2749

KEV
Updated Apr 21, 2026 · PUBLISHED
View KEV entry →

Description

Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
XperienceKentico / Xperience>= 0, <= 13.0.178affected