Kkfileview Security Vulnerabilities and Issues — Kkfileview CVE List

Lucene search

KekingKkfileview

8 matches found

CVE•added 2022/05/25 1:15 a.m.•72 views

CVE-2022-29349

kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.

6.1CVSS6AI score0.02663EPSS

CVE•added 2023/02/01 8:15 p.m.•58 views

CVE-2022-46934

kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.

6.1CVSS6AI score0.08742EPSS

CVE•added 2022/09/02 4:15 a.m.•51 views

CVE-2022-36593

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.

6.5CVSS6.6AI score0.00275EPSS

CVE•added 2022/10/17 9:15 p.m.•47 views

CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.

6.1CVSS5.9AI score0.00113EPSS

CVE•added 2022/08/17 10:15 p.m.•44 views

CVE-2022-35151

kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.

6.1CVSS6.1AI score0.15287EPSS

CVE•added 2022/12/25 8:15 p.m.•44 views

CVE-2022-4740

A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttribute of the file /picturesPreview. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the p...

6.1CVSS4.8AI score0.00296EPSS

CVE•added 2022/09/29 5:15 p.m.•42 views

CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

6.1CVSS6AI score0.26271EPSS

CVE•added 2023/12/04 3:15 p.m.•27 views

CVE-2023-48815

kkFileView v4.3.0 is vulnerable to Incorrect Access Control.

6.1CVSS6.2AI score0.00234EPSS