CVE-2019-10068: Kentico Xperience Deserialization of Untrusted Data
Kentico Xperience Deserialization of Untrusted Data Vulnerability. Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.
- CISA KEV-listed (remediation due 2022-04-15)
- EPSS 93.8% (99.9% percentile)