Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2023-48815
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
kkFileView v4.3.0 is vulnerable to Incorrect Access Control.
0
Attacker Value
Unknown
CVE-2022-46934
Disclosure Date: February 01, 2023 (last updated October 08, 2023)
kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
0
Attacker Value
Unknown
CVE-2022-43140
Disclosure Date: November 17, 2022 (last updated December 22, 2024)
kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter.
0
Attacker Value
Unknown
CVE-2022-40879
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'
0
Attacker Value
Unknown
CVE-2022-35151
Disclosure Date: August 17, 2022 (last updated October 08, 2023)
kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.
0
