Lucene search

CVE-2022-46934

🗓️ 01 Feb 2023 20:10:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 56 Views🌐 WEB

kkFileView v4.1.0 XSS vulnerability via url paramete

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2022-46934	1 Feb 202320:15	–	nvd
Prion	Cross site scripting	1 Feb 202320:15	–	prion
Vulnrichment	CVE-2022-46934	1 Feb 202300:00	–	vulnrichment
Nuclei	kkFileView 4.1.0 - Cross-Site Scripting	31 Mar 202311:28	–	nuclei
Cvelist	CVE-2022-46934	1 Feb 202300:00	–	cvelist
OSV	CVE-2022-46934	1 Feb 202320:15	–	osv

Nvd

Node

keking kkfileviewMatch4.1.0

Source	Link
github	www.github.com/kekingcn/kkFileView/issues/411

Parameter	Position	Path	Description	CWE
url	query param	/controller/OnlinePreviewController.java	Cross-site scripting (XSS) vulnerability via the url parameter.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Feb 2023 20:15Current

6Medium risk

Vulners AI Score6

CVSS36.1

EPSS0.08742

SSVC

CWE-79