Keking

Kkfileview

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-4538

  • EPSS 0.3%
  • Veröffentlicht 11.05.2025 10:31:04
  • Zuletzt bearbeitet 16.06.2025 18:31:48

A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotel...

6.1

CVE-2023-48815

Exploit
  • EPSS 0.23%
  • Veröffentlicht 04.12.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:32:30

kkFileView v4.3.0 is vulnerable to Incorrect Access Control.

6.1

CVE-2022-46934

Exploit
  • EPSS 12.87%
  • Veröffentlicht 01.02.2023 20:15:10
  • Zuletzt bearbeitet 27.03.2025 16:15:16

kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.

6.1

CVE-2022-4740

Exploit
  • EPSS 0.4%
  • Veröffentlicht 25.12.2022 20:15:26
  • Zuletzt bearbeitet 21.11.2024 07:35:50

A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttribute of the file /picturesPreview. The manipulation leads to cross site scripting. The attack may be launched ...

7.5

CVE-2022-43140

Exploit
  • EPSS 79.27%
  • Veröffentlicht 17.11.2022 17:15:13
  • Zuletzt bearbeitet 30.04.2025 14:15:25

kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests v...

6.1

CVE-2022-42147

  • EPSS 0.23%
  • Veröffentlicht 17.10.2022 21:15:10
  • Zuletzt bearbeitet 14.05.2025 21:15:57

kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.

9.8

CVE-2022-42149

  • EPSS 42.84%
  • Veröffentlicht 17.10.2022 20:15:10
  • Zuletzt bearbeitet 14.05.2025 21:15:57

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

6.1

CVE-2022-40879

Exploit
  • EPSS 19.02%
  • Veröffentlicht 29.09.2022 17:15:54
  • Zuletzt bearbeitet 20.05.2025 20:15:24

kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

6.5

CVE-2022-36593

Exploit
  • EPSS 0.97%
  • Veröffentlicht 02.09.2022 04:15:11
  • Zuletzt bearbeitet 21.11.2024 07:13:22

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.

6.1

CVE-2022-35151

Exploit
  • EPSS 4.41%
  • Veröffentlicht 17.08.2022 22:15:08
  • Zuletzt bearbeitet 21.11.2024 07:10:49

kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.