PT-2026-33626
CVE-2026-6568
·
Published
2026-04-19
·
Updated
2026-04-19
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
kodcloud KodExplorer versions prior to 4.53
Description
A path traversal issue exists in the Public Share Handler component. Remote attackers can manipulate the
path argument in the initShareOld() function located in the /app/controller/share.class.php file to access files and directories outside the intended folder.Recommendations
Update to a version newer than 4.52.
As a temporary workaround, restrict access to the
initShareOld() function in the /app/controller/share.class.php file.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾