Description
KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication.
Unscored
CVE-2018-18950
EUVD-2018-10654GHSA-xg98-5m8g-vc99
KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindedito…
Published Nov 5, 2018 · Updated Sep 16, 2024 · Assigned by mitre