medium4.3Public exploit code
CVE-2022-4944
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KodExplorer 4.49 - CSRF to Arbitrary File Upload2023-04-25 · webapps · php
Impact
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.50 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227000.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kodcloud | Kodexplorer | through 4.49 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/kalcaddle/KodExplorer/issues/512
- https://github.com/kalcaddle/KodExplorer/releases/tag/4.50
- https://vuldb.com/?ctiid.227000
- https://vuldb.com/?id.227000
- https://www.mediafire.com/file/709i2vxybergtg7/poc.zip/file
- https://github.com/kalcaddle/KodExplorer/issues/512
- https://github.com/kalcaddle/KodExplorer/releases/tag/4.50
- https://vuldb.com/?ctiid.227000
- https://vuldb.com/?id.227000
- https://www.mediafire.com/file/709i2vxybergtg7/poc.zip/file