CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery SSRF via controller\OnlinePreviewController.java...

EUVD-2022-33691

Malicious code in bioql PyPI...

PT-2022-26771 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.1.0 Description: The issue allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter. This is achieved through a Server-Side Request Forgery SSRF in the...

Keking kkFileView 代码问题漏洞

Keking kkFileView is a Spring-Boot project for online previewing of documents from Keking Technology Keking. A security vulnerability exists in Keking kkFileView version 4.0, which originates from a cross-site request forgery that can be realized by an attacker through its...