← All advisories

Critical severity9.8NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026

CVE-2022-42149

CVE-2022-42149

Description

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

Affected products

2

kekingcn/kkFileViewcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <4.0

Patches

Vulnerability mechanics

References

1

github.com/xiaojiangxl/paper/blob/main/kkFileView/ssrf_vul_en.mdnvdBroken LinkThird Party Advisory

News mentions

0

No linked articles in our index yet.