What’s Vulnerable › Vulnerabilities

CVE-2023-53934: Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-18 · updated 2026-06-17
• Weakness: CWE-97

Description

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests.

Affected products

• Kentico Xperience: through 12.0.98

References

• https://devnet.kentico.com/download/hotfixes
• https://www.vulncheck.com/advisories/kentico-xperience-getresource-handler-denial-of-service

Get alerted when CVE-2023-53934 or the next vulnerability affects your stack