CVE-2023-48815

kkFileView v4.3.0 is vulnerable to Incorrect Access Control...

Improper access control

kkFileView v4.3.0 is vulnerable to Incorrect Access Control...

kkFileView Security Vulnerability

kkFileView is Kaijing Technology kekingcn open source Spring-Boot based on a generic file online preview project . kkFileView v4.3.0 version of a security vulnerability , the vulnerability stems from incorrect access control...

CVE-2023-48815

kkFileView v4.3.0 is vulnerable to Incorrect Access Control...

CVE-2023-48815

kkFileView v4.3.0 is vulnerable to Incorrect Access Control...

PT-2023-30966 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.3.0 Description: The issue is related to Incorrect Access Control. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

CVE-2023-48815: URL Redirection to Untrusted Site

kkFileView v4.3.0 is vulnerable to Incorrect Access Control...

CVE-2023-48815

CVE-2023-48815 affects kkFileView v4.3.0 and is described as an Incorrect Access Control issue. The NVD entry provides CVSS 3.1: Network, Low Attack Complexity, No Privileges Required, User Interaction Required, Scope Changed, with Confidentiality and Integrity Impact Low, Availability Impact Non...

CVE-2022-46934

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

Cross site scripting

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

EUVD-2022-49713

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

CVE-2022-46934: Improper Neutralization of Input During Web Page Generation

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

PT-2023-15106

Name of the Vulnerable Software and Affected Versions kkFileView version 4.1.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the url parameter at the /controller/OnlinePreviewController.java endpoint. Recommendations For...

CVE-2022-46934

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

CVE-2022-46934

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

kkFileView Cross-Site Script Vulnerability

Keking kkFileView is a Spring-Boot project to build online preview of documents by Keking Technology Keking. A security vulnerability exists in kkFileView v4.1.0, which stems from the /controller/OnlinePreviewController.java component's manipulation of the url parameter allowing an attacker to...

CVE-2022-46934

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

CVE-2022-46934

kkFileView 4.1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw in the url parameter of /controller/OnlinePreviewController.java. An attacker can inject arbitrary script into the victim’s browser, potentially stealing cookies or influencing page behavior. This aligns with multiple public repo...

kkFileView cross-site scripting vulnerability (CNVD-2023-00013)

kkFileView is China's Keking Technology Keking company's a Spring-Boot to create a file document online preview project . A cross-site scripting vulnerability exists in kkFileView, which stems from the setWatermarkAttribute function in the /picturesPreview file that allows an attacker to implemen...

CVE-2022-4740

A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttribute of the file /picturesPreview. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...