| शीर्षक | KodExplorer 4.52 Path Traversal |
|---|
| विवरण | KodExplorer v4.52 contains a pre-authentication path traversal vulnerability in its public share feature. By manipulating the path parameter with .., an attacker can escape the shared directory and access files stored in the parent directory. Multiple endpoints are affected, allowing directory listing, content searching, ZIP-based exfiltration, and direct disclosure of .oexe file contents. The issue is particularly dangerous because it requires no authentication and allows attackers with only a public share link to access non-shared private data outside the intended share scope.
|
|---|
| स्रोत | ⚠️ https://vulnplus-note.wetolink.com/share/JyHBnRUaoOY2 |
|---|
| उपयोगकर्ता | vulnplusbot (UID 96250) |
|---|
| सबमिशन | 26/03/2026 10:51 AM (6 महीनों पहले) |
|---|
| संयम | 18/04/2026 09:07 PM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 358202 [kodcloud KodExplorer तक 4.52 Public Share share.class.php initShareOld path निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|