CVSS: 8.2
Affected versions: 22.0.0 - 31.8.3
Category: Caching
Under certain shared-cache configurations (CDNs, reverse proxies), previously cached assets could remain accessible to requests without the required authentication and permission checks.
The update marks affected responses as private to prevent storage by shared caches.
Update to version 31.8.4 or newer. See Update Xperience by Kentico projects for detailed instructions.
If you use a CDN or reverse proxy, clear previously cached administration files after applying the update. Existing cached copies are not automatically removed by the upgrade and may remain accessible until they expire. Ensure your cache configuration respects the application's private cache-control settings.
CVSS: 6.9
Affected versions: 22.0.0 - 31.8.3
Category: Routing
A medium-severity routing vulnerability in one of the application's endpoints allowed unauthenticated requests to access a small number of administration endpoints. Exposure was limited to non-sensitive status information about the application. No impact on confidentiality or integrity was identified.
Update to version 31.8.4 or newer. See Update Xperience by Kentico projects for detailed instructions.