Critical · 9.8 Scanner template CVE-2022-42149 EUVD-2022-45226GHSA-v6hf-4fpr-7xxc

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

Published Oct 17, 2022 · Updated May 14, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

kkFileView 4.0 - Server-Side Request Forgery http/cves/2022/CVE-2022-42149.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/xiaojiangxl/paper/blob/main/kkFileView/ssrf_vul_en.md