PT-2023-32793 · Kalcaddle · Kodexplorer

·

CVE-2023-6852

·

Publicado

2023-12-16

·

Atualizado

2024-05-17

CVSS v2.0

6.5

Média

VetorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions kalcaddle KodExplorer versions up to 4.51.03
Description A critical vulnerability has been found in kalcaddle KodExplorer, affecting an unknown function of the file plugins/webodf/app.php. This issue leads to server-side request forgery and can be launched remotely. The exploit has been disclosed to the public.
Recommendations For versions up to 4.51.03, upgrade to version 4.52.01 to address this issue. As a temporary workaround, consider restricting access to the plugins/webodf/app.php file until the upgrade is applied.

Exploit

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-6852

Produtos afetados

Kodexplorer