Vulnerabilidades do Kekingcn kkFileView
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Kekingcn kkFileView: 2 registro(s), com versões afetadas e correções.
CVE-2026-73244
Média · 5.3
CWE-22 11/08/2026
kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing
kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileController#getFiles to Files.newDirectoryStream without confinement to the demo directory, allowing directory enumeration outside the intended root. This issue is fixed in version 5.0.1.
CVE-2026-73243
Média · 5.8
CWE-918 11/08/2026
kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypass
kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an attacker-selected URL after FileHandlerService#getFileAttribute uses the fullfilename parameter to force an OFFICE, COMPRESS, or CAD type. This issue is fixed in version 5.0.1.