Approved changes feed: RSS · Atom
cpe:2.3:a:cksource:ckfinder:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cksource (3712f781-219f-59c2-bc43-1813c18cf6c8) |
|---|---|
| Product | Ckfinder (00e61f1e-c336-5479-8b01-dfdc471061a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ckfinder/ckfinder |
purl2cpe | 2026-06-01 10:10:59.715302 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-15891 |
vulnerable | 2026-06-08 05:12:58.180729 |
Details available
An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof content sniffing protection.
Published: 2019-09-26T20:56:19.000Z
Updated: 2024-08-05T01:03:31.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-20023 |
vulnerable | 2026-06-08 05:07:32.532331 |
Details available
MEDIUM (5)
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided.
Published: 2025-12-05T00:00:00.000Z
Updated: 2025-12-05T17:20:03.650Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.