| शीर्षक | KodExplorer 4.52 SSRF |
|---|
| विवरण | KodExplorer v4.52 is affected by a pre-authentication reflected SSRF vulnerability in share/fileGet. An attacker can supply an arbitrary remote URL, causing the server to fetch it and return the response body directly to the attacker in base64 form. Because the implementation does not properly restrict localhost, internal IP ranges, or cloud metadata addresses, the flaw can be exploited to read local-only services, internal web applications, and instance metadata without authentication. This significantly increases the severity compared to blind SSRF and may expose highly sensitive internal information.
|
|---|
| स्रोत | ⚠️ https://vulnplus-note.wetolink.com/share/wgfZR6kXRApl |
|---|
| उपयोगकर्ता | vulnplusbot (UID 96250) |
|---|
| सबमिशन | 26/03/2026 10:57 AM (6 महीनों पहले) |
|---|
| संयम | 18/04/2026 09:07 PM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 358203 [kodcloud KodExplorer तक 4.52 fileGet Endpoint share.class.php fileUrl कमजोर प्रमाणीकरण] |
|---|
| अंक | 19 |
|---|