Kodexplorer
Approved changes feed: RSS · Atom
cpe:2.3:a:kodcloud:kodexplorer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kodcloud (60b2f920-7b74-5a88-9e25-d87a54e3d5b5) |
|---|---|
| Product | Kodexplorer (a1cc0d8d-6e6a-588c-bb49-d6ab00ca3607) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kalcaddle/kodexplorer |
purl2cpe | 2026-06-01 10:14:35.249433 |
pkg:sourceforge/kodexplorer.mirror |
purl2cpe | 2026-06-01 10:14:35.249436 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6571 |
vulnerable | 2026-06-08 08:07:04.899404 |
kodcloud KodExplorer systemRole.class.php roleGroupAction authorization
MEDIUM (6.3)
A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipulation of the argument group_role can lead to authorization bypass. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-19T12:00:17.810Z
Updated: 2026-04-20T14:18:17.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6570 |
vulnerable | 2026-06-08 08:07:04.898891 |
kodcloud KodExplorer systemMember.class.php initInstall authorization
LOW (2.7)
A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-19T11:00:17.545Z
Updated: 2026-04-20T16:23:44.786Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6569 |
vulnerable | 2026-06-08 08:07:04.898383 |
kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication
HIGH (7.3)
A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-19T10:15:11.445Z
Updated: 2026-04-20T14:55:28.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6568 |
vulnerable | 2026-06-08 08:07:04.897810 |
kodcloud KodExplorer Public Share share.class.php initShareOld path traversal
HIGH (7.3)
A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-19T09:45:11.131Z
Updated: 2026-04-20T15:20:09.531Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34504 |
vulnerable | 2026-06-08 07:20:59.653510 |
KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.
Published: 2025-12-11T21:43:45.437Z
Updated: 2026-03-05T12:04:27.914Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6853 |
vulnerable | 2026-06-08 06:21:56.054168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6852 |
vulnerable | 2026-06-08 06:21:56.053668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6851 |
vulnerable | 2026-06-08 06:21:56.053076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6850 |
vulnerable | 2026-06-08 06:21:56.052360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4944 |
vulnerable | 2026-06-08 05:52:02.227031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46154 |
vulnerable | 2026-06-08 05:50:38.255880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.