PT-2022-26285
CVE-2022-42149
·
تاريخ النشر
2022-10-17
·
تاريخ التحديث
2022-10-20
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
kkFileView version 4.0
Description
The issue is related to Server-side request forgery (SSRF) via the
OnlinePreviewController.java controller. This allows for potential unauthorized access to internal resources.Recommendations
For kkFileView version 4.0, as a temporary workaround, consider disabling the
OnlinePreviewController.java controller until a patch is available. Restrict access to the vulnerable controller to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾