CVE-2022-43140
Assigner: mitre
Published: 2022-11-17T00:00:00
State: PUBLISHED
descriptions: value: kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter.
affected: vendor: n/a
product: n/a
versions: version: n/a
status: affected
problemTypes: descriptions: type: text
description: n/a