Kkfileview@4.0.0 Security Vulnerabilities and Issues — Kkfileview@4.0.0 CVE List

Lucene search

KekingKkfileview4.0.0

5 matches found

CVE•added 2022/02/15 2:15 p.m.•102 views

CVE-2021-43734

kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.

7.5CVSS7.4AI score0.6797EPSS

CVE•added 2022/10/17 8:15 p.m.•76 views

CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

9.8CVSS9.4AI score0.00103EPSS

CVE•added 2022/05/25 1:15 a.m.•72 views

CVE-2022-29349

kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.

6.1CVSS6AI score0.02663EPSS

CVE•added 2022/09/02 4:15 a.m.•51 views

CVE-2022-36593

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.

6.5CVSS6.6AI score0.00275EPSS

CVE•added 2022/10/17 9:15 p.m.•47 views

CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.

6.1CVSS5.9AI score0.00113EPSS