Kentico up to 13.0.65 GetResource denial of service

Summaryinfo

A vulnerability labeled as problematic has been found in Kentico up to 13.0.65. The affected element is an unknown function of the component GetResource Handler. The manipulation results in denial of service. This vulnerability is cataloged as CVE-2022-32387. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Kentico up to 13.0.65. It has been classified as problematic. Affected is an unknown part of the component GetResource Handler. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. CVE summarizes:

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.

The weakness was shared 07/19/2022. The advisory is shared for download at devnet.kentico.com. This vulnerability is traded as CVE-2022-32387 since 06/05/2022. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1499.

Upgrading to version 13.0.66 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• Kentico

Version

• 13.0.0
• 13.0.1
• 13.0.2
• 13.0.3
• 13.0.4
• 13.0.5
• 13.0.6
• 13.0.7
• 13.0.8
• 13.0.9
• 13.0.10
• 13.0.11
• 13.0.12
• 13.0.13
• 13.0.14
• 13.0.15
• 13.0.16
• 13.0.17
• 13.0.18
• 13.0.19
• 13.0.20
• 13.0.21
• 13.0.22
• 13.0.23
• 13.0.24
• 13.0.25
• 13.0.26
• 13.0.27
• 13.0.28
• 13.0.29
• 13.0.30
• 13.0.31
• 13.0.32
• 13.0.33
• 13.0.34
• 13.0.35
• 13.0.36
• 13.0.37
• 13.0.38
• 13.0.39
• 13.0.40
• 13.0.41
• 13.0.42
• 13.0.43
• 13.0.44
• 13.0.45
• 13.0.46
• 13.0.47
• 13.0.48
• 13.0.49
• 13.0.50
• 13.0.51
• 13.0.52
• 13.0.53
• 13.0.54
• 13.0.55
• 13.0.56
• 13.0.57
• 13.0.58
• 13.0.59
• 13.0.60
• 13.0.61
• 13.0.62
• 13.0.63
• 13.0.64
• 13.0.65

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion