CVE-2023-6853

Name of the Vulnerable Software and Affected Versions KodExplorer versions up to 4.51.03

Description A critical vulnerability was found in the function index of the file plugins/officeLive/app.php. The manipulation of the argument path leads to server-side request forgery. The attack can be launched remotely.

Recommendations For versions up to 4.51.03, upgrade to version 4.52.01 to address this issue. As a temporary workaround, consider restricting access to the plugins/officeLive/app.php file to minimize the risk of exploitation. Avoid using the path argument in the affected function until the issue is resolved.