GHSA-mm82-7x4g-wvpvMediumCVSS 6.3

A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function...

Published
October 25, 2026
Last Modified
October 25, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (6)