Unrated severityNVD Advisory· Published Dec 18, 2025· Updated Dec 27, 2025
Kentico Xperience <= 12.0.47 Virtual Context Information Disclosure
CVE-2019-25228
Description
An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and link/image loading.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- devnet.kentico.com/download/hotfixesmitrevendor-advisorypatch
- www.vulncheck.com/advisories/kentico-xperience-virtual-context-information-disclosuremitrethird-party-advisory
News mentions
0No linked articles in our index yet.