Kodcloud
Kodcloud Kodexplorer: vulnerabilidades y CVE
Kodcloud Kodexplorer tiene 14 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses5
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-6571 | Baja (2.1) | 0.36% | — | 19 abr 2026 | A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipulation of the… |
| CVE-2026-6570 | Baja (2) | 0.40% | — | 19 abr 2026 | A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in… |
| CVE-2026-6569 | Media (6.9) | 0.65% | — | 19 abr 2026 | A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument… |
| CVE-2026-6568 | Media (5.5) | 0.72% | — | 19 abr 2026 | A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This… |
| CVE-2025-34504 | Media (5.3) | 0.32% | — | 11 dic 2025 | KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to… |
| CVE-2023-49489 | Media (6.1) | 0.72% | — | 19 dic 2023 | Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php. |
| CVE-2023-6853 | Crítica (9.8) | 0.70% | — | 16 dic 2023 | A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability is the function index of the file plugins/officeLive/app.php. The manipulation of the argument path… |
| CVE-2023-6852 | Crítica (9.8) | 0.76% | — | 16 dic 2023 | A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown function of the file plugins/webodf/app.php. The manipulation leads to server-side request forgery. It… |
| CVE-2023-6851 | Crítica (9.8) | 0.91% | — | 16 dic 2023 | A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been rated as critical. This issue affects the function unzipList of the file plugins/zipView/app.php of the component ZIP Archive Handler. The… |
| CVE-2023-6850 | Crítica (9.8) | 0.84% | — | 16 dic 2023 | A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been declared as critical. This vulnerability affects unknown code of the file /index.php?pluginApp/to/yzOffice/getFile of the component API… |
| CVE-2021-36646 | Media (6.1) | 0.81% | — | 6 sept 2023 | A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page. |
| CVE-2023-37153 | Media (6.1) | 0.73% | — | 10 jul 2023 | KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description… |
| CVE-2022-4944 | Alta (8.8) | 2.7% | — | 22 abr 2023 | A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The… |
| CVE-2022-46154 | Alta (7.5) | 0.86% | — | 6 dic 2022 | Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not prevent unauthenticated users from requesting arbitrary files from the host OS file system. As a… |