CVE-2023-6848

Name of the Vulnerable Software and Affected Versions kalcaddle kodbox versions up to 1.48

Description A critical issue has been found, affecting the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the soffice argument leads to command injection. This issue can be exploited remotely.

Recommendations For versions up to 1.48, upgrade to version 1.48.04 to address this issue. As a temporary workaround, consider restricting access to the plugins/officeViewer/controller/libreOffice/index.class.php file until the upgrade is applied.