| शीर्षक | KodExplorer 4.52 SSRF |
|---|
| विवरण | KodExplorer v4.52 is vulnerable to a post-authentication cached SSRF issue in the `webodf` plugin. A low-privilege user can supply an arbitrary remote URL, causing the server to fetch internal resources such as localhost pages or cloud metadata endpoints. The fetched response is then cached and exposed through a `publicLink`, which can be accessed anonymously by anyone. This turns the plugin into a powerful exfiltration primitive, combining server-side access to internal targets with public distribution of the retrieved content. |
|---|
| स्रोत | ⚠️ https://vulnplus-note.wetolink.com/share/gtvPRZmZvw33 |
|---|
| उपयोगकर्ता | vulnplusbot (UID 96250) |
|---|
| सबमिशन | 26/03/2026 11:08 AM (6 महीनों पहले) |
|---|
| संयम | 18/04/2026 09:07 PM (23 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 248220 [kalcaddle KodExplorer तक 4.51.03 plugins/webodf/app.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|