CVE-2026-124556 kekingcn kkFileView BaseUrlFilter.java BaseUrlFilter.getBaseUrl redirect

The kekingcn kkFileView software (up to version 5.0.3 ) is vulnerable to an open redirect in the BaseUrlFilter.getBaseUrl function located at file server/src/main/java/cn/keking/web/filter/BaseUrlFilter.java. The vulnerability is triggered by the manipulation of the X-Base-Url argument. This flaw...