CVE-2022-42149

creationtimestamp| type| source ---|---|--- 2022-10-18 00:13:39+00:00| seen| https://t.me/cibsecurity/51643 2025-05-14 21:32:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16418...

CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

CVE-2022-42149

kkFileView 4.0 is affected by CVE-2022-42149: a server-side request forgery (SSRF) flaw in OnlinePreviewController.java caused by improper validation. This allows an attacker to induce the server to fetch arbitrary URLs, with unauthenticated access and potential internal network exposure. The Nuc...