Threats tagged 'ghsa-cv54-pprh-36x2'

A security vulnerability in kekingcn kkFileView up to version 5.0.3 allows remote attackers to perform an open redirect via manipulation of the X-Base-Url HTTP header in the BaseUrlFilter.getBaseUrl function. The vulnerability has a medium severity with a CVSS score of 4.3. Public exploit code has been disclosed, but no official vendor response or patch is currently available.