cve.bz

kekingcn kkfileview vulnerabilities, newest first

Filter
  1. 2.1CVE-2026-124556EPSS 0.3%

    A security vulnerability has been detected in kekingcn kkFileView up to 5.0.3. This issue affects the function BaseUrlFilter.getBaseUrl of the file server/src/main/java/cn/keking/web/filter/BaseUrlFilter.java. The manipulation of the argum…

  2. 5.3CVE-2026-73244EPSS 0.4%

    kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path p…

  3. 5.8CVE-2026-73243EPSS 0.4%

    kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config…