Lucene search
PRIOn knowledge basePRION:CVE-2022-43140HistoryNov 17, 2022 - 5:15 p.m.
Server side request forgery (ssrf)
2022-11-1717:15:00
PRIOn knowledge base
www.prio-n.com
server-side request forgery
ssrf
cn.keking.web.controller
arbitrary requests
crafted urls
security vulnerability
0.009 Low
EPSS
Percentile
82.7%
kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kkfileview | eq | 4.1.0 |
Related
nvd
nvd
CVE-2022-43140
2022-11-17 17:15:13
cvelist
cvelist
CVE-2022-43140
2022-11-17 00:00:00
nuclei
nuclei
kkFileView 4.1.0 - Server-Side Request Forgery
2023-03-26 16:17:16
cve
cve
CVE-2022-43140
2022-11-17 17:15:13
osv
osv
CVE-2022-43140
2022-11-17 17:15:13