Keking kkFileView 代码问题漏洞

Keking kkFileView is a Spring-Boot project for online previewing of documents from Keking Technology Keking. A security vulnerability exists in Keking kkFileView version 4.0, which originates from a cross-site request forgery that can be realized by an attacker through its...

CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting XSS via controller\ Filecontroller.java...

CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

Keking kkFileView 跨站脚本漏洞

Keking kkFileView is a Spring-Boot project from Keking Technology Keking, a Chinese company that builds online previews for documents. A security vulnerability exists in Keking kkFileView version 4.0, which can be exploited to implement cross-site scripting via its controllerFilecontroller.java...

CVE-2022-42147

CVE-2022-42147 affects kkFileView 4.0. The provided documents identify a Cross Site Scripting (XSS) vulnerability via the file controller component named Filecontroller.java . The CVE entry lists a base CVSS v3.1 score of 6.1 (Impact: Confidentiality/Integrity Low, Availability None; Network atta...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

Cross site scripting

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

CVE-2022-40879

kkFileView 4.1.0 is vulnerable to Cross-Site Scripting (XSS) via the errorMsg parameter. The Nuclei template for CVE-2022-40879 confirms multiple XSS flaws that allow arbitrary script execution in the victim’s browser, potentially enabling cookie-based credential theft and other attacks. Affected...

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting XSS via the parameter 'errorMsg.'...

PT-2022-25603 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.1.0 Description: The issue concerns a Cross Site Scripting XSS problem. It can be exploited via the errorMsg parameter. Recommendations: For kkFileView version 4.1.0, consider restricting the use of the errorMsg parameter...

kkFileView 跨站脚本漏洞

Keking kkFileView is a Spring-Boot project from Keking Technology Keking, a Chinese company that builds online previews of files and documents. A security vulnerability exists in kkFileView v4.1.0, which stems from the errorMsg parameter being vulnerable to cross-site scripting...

CVE-2022-36593

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java...

CVE-2022-36593

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java...

Arbitrary file deletion

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java...

CVE-2022-36593

CVE-2022-36593 affects kkFileView v4.0.0, exposing an arbitrary file deletion vulnerability through the fileName parameter in /controller/FileController.java. The root cause is the unsafe handling of fileName, enabling deletion of arbitrary files. Impact is stated as deletion capability; no fixes...

CVE-2022-36593

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java...

CVE-2022-36593

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java...