CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

CVE-2022-42147

CVE-2022-42147 affects kkFileView 4.0. The provided documents identify a Cross Site Scripting (XSS) vulnerability via the file controller component named Filecontroller.java . The CVE entry lists a base CVSS v3.1 score of 6.1 (Impact: Confidentiality/Integrity Low, Availability None; Network atta...

CVE-2022-42149: Server-Side Request Forgery (SSRF)

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

CVE-2022-42147: Improper Neutralization of Input During Web Page Generation

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

Keking kkFileView cross-site scripting vulnerability

Keking kkFileView is a Spring-Boot project from Keking Technology Keking, a Chinese company that builds online previews for documents. A security vulnerability exists in Keking kkFileView version 4.0, which can be exploited to implement cross-site scripting via its controllerFilecontroller.java...

Keking kkFileView code issue vulnerability

Keking kkFileView is a Spring-Boot project for online previewing of documents from Keking Technology Keking. A security vulnerability exists in Keking kkFileView version 4.0, which originates from a cross-site request forgery that can be realized by an attacker through its...

CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

PT-2022-26284

Name of the Vulnerable Software and Affected Versions kkFileView version 4.0 Description The issue is related to Cross Site Scripting XSS via the controller Filecontroller.java. This allows for potential malicious script execution. Recommendations For kkFileView version 4.0, consider disabling th...

CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

PT-2022-26285

Name of the Vulnerable Software and Affected Versions kkFileView version 4.0 Description The issue is related to Server-side request forgery SSRF via the OnlinePreviewController.java controller. This allows for potential unauthorized access to internal resources. Recommendations For kkFileView...

CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

Cross site scripting

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...