CyberSec.Space Logo
Back to CVE Browser

CVE-2025-2749

🔥 Known Exploited (CISA KEV)HIGH
7.2
CVSS Severity Score
EPSS Score88.0180%
EPSS Percentile89.28th
Published2025-03-24
Last Modified2026-06-17
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.

Affected Platforms (CPE)

📦
Kentico

Xperience

<= 13.0.178

References & Advisories

🔗 https://devnet.kentico.com/download/hotfixes
🔗 https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/
🔗 https://www.vulncheck.com/advisories/kentico-xperience-staging-media-file-upload-authenticated-rce
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2749

Related Vulnerabilities

CVE-2024-583235.1

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Checkbox for...

CVE-2024-583225.1

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options c...

CVE-2024-583215.1

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form validation ...

CVE-2024-583206.9

An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface host...