This vulnerability affects the Add function in the Public Share Handler of kalcaddle kodbox 1.64, enabling unrestricted file uploads. The issue arises from insufficient validation or restrictions on uploaded files, allowing remote attackers to upload potentially malicious files. The attack vector is network-based with high complexity, requiring no privileges or user interaction. The vulnerability has a CVSS 4.0 base score of 6.3, indicating medium severity. The vendor has not issued any advisory or patch, and the exploit code is publicly accessible.

Successful exploitation could allow remote attackers to upload arbitrary files to the affected system, which may lead to further compromise depending on how the uploaded files are handled or executed. The vulnerability does not require privileges or user interaction, increasing its risk. However, the high complexity reduces the likelihood of widespread exploitation. No known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider implementing manual mitigations such as restricting file upload permissions, disabling the vulnerable functionality if possible, or applying web application firewall rules to detect and block suspicious upload attempts until an official patch is available.