Vulnerabilities > Kodcloud > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-01-16 CVE-2023-39691 Unspecified vulnerability in Kodcloud Kodbox
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.
network
low complexity
kodcloud
critical
9.8
2023-12-16 CVE-2023-6852 Server-Side Request Forgery (SSRF) vulnerability in Kodcloud Kodexplorer
A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03.
network
low complexity
kodcloud CWE-918
critical
9.8
2023-12-16 CVE-2023-6853 Server-Side Request Forgery (SSRF) vulnerability in Kodcloud Kodexplorer
A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03.
network
low complexity
kodcloud CWE-918
critical
9.8
2023-12-16 CVE-2023-6851 Code Injection vulnerability in Kodcloud Kodexplorer
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
network
low complexity
kodcloud CWE-94
critical
9.8
2023-12-16 CVE-2023-6850 Unrestricted Upload of File with Dangerous Type vulnerability in Kodcloud Kodexplorer
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
network
low complexity
kodcloud CWE-434
critical
9.8
2023-12-16 CVE-2023-6849 Server-Side Request Forgery (SSRF) vulnerability in Kodcloud Kodbox
A vulnerability was found in kalcaddle kodbox up to 1.48.
network
low complexity
kodcloud CWE-918
critical
9.8
2023-12-16 CVE-2023-6848 Command Injection vulnerability in Kodcloud Kodbox
A vulnerability was found in kalcaddle kodbox up to 1.48.
network
low complexity
kodcloud CWE-77
critical
9.8
2023-11-18 CVE-2023-48028 Improper Restriction of Excessive Authentication Attempts vulnerability in Kodcloud Kodbox 1.46.01
kodbox 1.46.01 has a security flaw that enables user enumeration.
network
low complexity
kodcloud CWE-307
critical
9.8