Vulnerabilities > CVE-2022-46154 - Unspecified vulnerability in Kodcloud Kodexplorer

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

kodcloud

NVD

Published: 2022-12-06

Updated: 2024-11-21

Summary

Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not prevent unauthenticated users from requesting arbitrary files from the host OS file system. As a result any files available to the host process may be accessed by arbitrary users. This issue has been addressed in version 4.50. Users are advised to upgrade. There are no known workarounds for this issue.

Vulnerable Configurations

Part	Description	Count
Application	Kodcloud Kodcloud Kodexplorer 2.1 Kodcloud Kodexplorer 2.61 Kodcloud Kodexplorer 3.1 Kodcloud Kodexplorer 3.12 Kodcloud Kodexplorer 3.21 Kodcloud Kodexplorer 3.22 Kodcloud Kodexplorer 3.23 Kodcloud Kodexplorer 3.34 Kodcloud Kodexplorer 3.35 Kodcloud Kodexplorer 3.36 Kodcloud Kodexplorer 3.37 Kodcloud Kodexplorer 3.41 Kodcloud Kodexplorer 3.43 Kodcloud Kodexplorer 3.45 Kodcloud Kodexplorer 3.46 Kodcloud Kodexplorer 4.1 Kodcloud Kodexplorer 4.2 Kodcloud Kodexplorer 4.21 Kodcloud Kodexplorer 4.22 Kodcloud Kodexplorer 4.23 Kodcloud Kodexplorer 4.24 Kodcloud Kodexplorer 4.25 Kodcloud Kodexplorer 4.32 Kodcloud Kodexplorer 4.34 Kodcloud Kodexplorer 4.35 Kodcloud Kodexplorer 4.36 Kodcloud Kodexplorer 4.38 Kodcloud Kodexplorer 4.39 Kodcloud Kodexplorer 4.45 Kodcloud Kodexplorer 4.46 Kodcloud Kodexplorer 4.47 Kodcloud Kodexplorer 4.48.01 Kodcloud Kodexplorer 4.48.02 Kodcloud Kodexplorer 4.49 Kodcloud Kodexplorer 4.49.02	35

Summary

Vulnerable Configurations

References