Vendors / Keking Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Keking records in CISA KEV No Keking vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02704 · Published 2022-10-17 · No fix listed CWE-918
Priority HIGH 72
kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02119 · Published 2022-11-17 · No fix listed CWE-918
Priority MEDIUM 60
kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01084 · Published 2023-02-01 · No fix listed CWE-79
Priority MEDIUM 60
kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00496 · Published 2022-10-17 · No fix listed CWE-79
Priority MEDIUM 60
kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01346 · Published 2022-09-29 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in kkFileView 4.4.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00429 · Published 2025-05-11 · No fix listed CWE-284
Priority MEDIUM 46
kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.10728 · Published 2022-02-15 · No fix listed CWE-22
Priority LOW 31
kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00928 · Published 2022-09-02 · No fix listed CWE-22
Priority LOW 31
kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01632 · Published 2022-08-17 · No fix listed CWE-79
Priority LOW 31
kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0175 · Published 2022-05-24 · No fix listed CWE-79
Priority LOW 28
kkFileView v4.3.0 is vulnerable to Incorrect Access Control.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00458 · Published 2023-12-04 · No fix listed CWE-601
Priority LOW 28
A vulnerability, which was classified as problematic, has been found in kkFileView.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00584 · Published 2022-12-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 9 0 0
THREATIST.IORead the docs