CVE-2022-35151
kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com