PT-2026-33628
CVE-2026-6570
·
Published
2026-04-19
·
Updated
2026-04-20
Description by
CVSS 2.0
3.3
LowMetricsAV:N/AC:L/Au:M/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
kodcloud KodExplorer versions prior to 4.53
Description
A flaw in the
initInstall() function within the '/app/controller/systemMember.class.php' file allows for authorization bypass. This occurs when the path argument is manipulated, enabling a remote attacker to bypass security checks.Recommendations
Update to a version later than 4.52.
As a temporary workaround, restrict access to the
initInstall() function in the '/app/controller/systemMember.class.php' file.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾