Skip to content
OpenAdvisories

Vendor

kekingcn

3 known vulnerabilities.

Products

kkFileView 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-124556

    kekingcn kkFileView BaseUrlFilter.java BaseUrlFilter.getBaseUrl redirect

    A security vulnerability has been detected in kekingcn kkFileView up to 5.0.3. This issue affects the function BaseUrlFilter.getBaseUrl of the file server/src/main/java/cn/keking/web/filter/BaseUrlFilter.java. The manipulation of the argument X-Base-Url leads…

    kekingcn kkFileView
  • Medium 5.3
    CVE-2026-73244

    kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing

    kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileCo…

    kekingcn kkFileView
  • Medium 5.8
    CVE-2026-73243

    kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypass

    kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, all…

    kekingcn kkFileView