CVE-2022-4944: medium-severity vulnerability in kalcaddle KodExplorer
kalcaddle KodExplorer cross-site request forgery
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 4.3epss 2.7%
from disclosure to weaponsame day
Published on NVDApr 22
1st PoCApr 21
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.50 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227000.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
kalcaddle · KodExplorerpublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/51388unverifiedgithubgithub.com/brosck/CVE-2022-4944★ 2cve_referencewww.mediafire.com/file/709i2vxybergtg7/poc.zip/fileunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — kalcaddle KodExplorer
In the same product, most dangerous first.
CVE-2023-6851MEDIUMkalcaddle KodExplorer ZIP Archive app.php unzipList code injectionEPSS 0.9%CVE-2022-46154HIGHArbitrary file access in KodExplorerEPSS 0.9%CVE-2023-6850MEDIUMkalcaddle KodExplorer API Endpoint unrestricted uploadEPSS 0.8%CVE-2026-104081HIGHKodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP ExtractionEPSS 0.8%CVE-2023-6852MEDIUMkalcaddle KodExplorer app.php server-side request forgeryEPSS 0.8%CVE-2023-6853MEDIUMkalcaddle KodExplorer app.php index server-side request forgeryEPSS 0.7%