CVE-2022-43140

Published: 2022-11-17T17:15Z

Last Modified: 2024-11-21T07:25Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt