Keking kkFileView 4.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:keking:kkfileview:4.1.0:*:*:*:*:*:*:*part: a version: 4.1.0 update: *
| Vendor | Keking (ae4692aa-9a17-5def-9900-80d96f028415) |
|---|---|
| Product | Kkfileview (4b8febb1-44db-5311-8c0f-b35bf04d1943) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/keking/kkfileview |
purl2cpe | 2026-06-01 10:17:07.575945 |
pkg:github/kekingcn/kkfileview |
purl2cpe | 2026-06-01 10:17:07.575947 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-48815 |
vulnerable | 2026-06-08 06:14:28.191916 |
Details available
kkFileView v4.3.0 is vulnerable to Incorrect Access Control.
Published: 2023-12-04T00:00:00.000Z
Updated: 2024-08-02T21:46:27.888Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46934 |
vulnerable | 2026-06-08 05:50:39.755479 |
Details available
kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
Published: 2023-02-01T00:00:00.000Z
Updated: 2025-03-27T16:10:32.387Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43140 |
vulnerable | 2026-06-08 05:49:31.147828 |
Details available
kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter.
Published: 2022-11-17T00:00:00.000Z
Updated: 2025-04-30T14:07:01.062Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40879 |
vulnerable | 2026-06-08 05:48:28.275052 |
Details available
kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'
Published: 2022-09-29T16:22:54.000Z
Updated: 2025-05-20T20:01:53.173Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35151 |
vulnerable | 2026-06-08 05:46:04.212353 |
Details available
kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.
Published: 2022-08-17T21:13:14.000Z
Updated: 2024-08-03T09:29:17.449Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.