Medium severity5.3NVD Advisory· Published Dec 18, 2025· Updated Jun 17, 2026
CVE-2019-25228
CVE-2019-25228
Description
An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and link/image loading.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- www.vulncheck.com/advisories/kentico-xperience-virtual-context-information-disclosurenvdThird Party Advisory
- devnet.kentico.com/download/hotfixesnvdProduct
News mentions
0No linked articles in our index yet.