CVE-2025-4538

A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Configurations

No configuration.

History

12 May 2025, 15:16

Type Values Removed Values Added
References () https://magnificent-dill-351.notion.site/Arbitrary-File-Upload-in-kkFileView-4-4-0-1e3c693918ed802581faccab9140a130 - () https://magnificent-dill-351.notion.site/Arbitrary-File-Upload-in-kkFileView-4-4-0-1e3c693918ed802581faccab9140a130 -
Summary
  • (es) Se encontró una vulnerabilidad en kkFileView 4.4.0. Se ha clasificado como crítica. Afecta a una parte desconocida del archivo /fileUpload. La manipulación del argumento File permite una carga sin restricciones. Es posible iniciar el ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió.

11 May 2025, 11:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-11 11:15

Updated : 2025-05-12 17:32


NVD link : CVE-2025-4538

Mitre link : CVE-2025-4538

CVE.ORG link : CVE-2025-4538


JSON object : View

Products Affected

No product.

CWE
CWE-284

Improper Access Control

CWE-434

Unrestricted Upload of File with Dangerous Type