| 제목 | keking kkFileView 5.0.0 Absolute Path Traversal |
|---|
| 설명 | An unauthenticated absolute path traversal vulnerability in the /listFiles endpoint of kkFileView v5.0.0 allows remote attackers to enumerate arbitrary server directories by supplying crafted path parameters with ../ sequences, leading to sensitive file system information disclosure.
An unauthenticated absolute path traversal vulnerability in the /listFiles endpoint of kkFileView v5.0.0 allows remote attackers to enumerate arbitrary server directories by supplying crafted path parameters with ../ sequences, leading to sensitive file system information disclosure.
|
|---|
| 원천 | ⚠️ https://github.com/kekingcn/kkFileView/security/advisories/GHSA-582w-88fr-m6fc |
|---|
| 사용자 | 0n1on (UID 100116) |
|---|
| 제출 | 2026. 07. 27. AM 08:32 (3 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 23. PM 03:04 (2 months later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 388573 [kekingcn kkFileView 까지 5.0.0 File endpoint FileController.java FileController#getFiles 디렉토리 순회] |
|---|
| 포인트들 | 0 |
|---|