Kodcloud vulnerabilities

Products

• Kodexplorer 16
• Kodbox 14

Newest

• collabora kodexplorer KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload CVE-2026-116057 5.3 MediumOctober 25, 2026
• collabora kodexplorer KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery CVE-2026-116056 5.3 MediumOctober 25, 2026
• collabora kodexplorer kodcloud KodExplorer systemRole.class.php roleGroupAction authorization CVE-2026-6571 5.3 MediumApril 19, 2026
• collabora kodexplorer kodcloud KodExplorer systemMember.class.php initInstall authorization CVE-2026-6570 5.1 MediumApril 19, 2026
• collabora kodexplorer kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication CVE-2026-6569 6.9 MediumApril 19, 2026
• collabora kodexplorer kodcloud KodExplorer Public Share share.class.php initShareOld path traversal CVE-2026-6568 6.9 MediumApril 19, 2026
• kalcaddle kodbox kalcaddle kodbox Compression zip command injection CVE-2026-1066 5.3 MediumJanuary 17, 2026
• collabora kodexplorer KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint CVE-2025-34504 5.3 MediumDecember 11, 2025
• kalcaddle kodbox kalcaddle kodbox editor.class.php fileSave path traversal CVE-2025-10233 5.3 MediumSeptember 10, 2025
• kalcaddle kodbox kalcaddle kodbox Download from Link serverDownload server-side request forgery CVE-2025-9414 5.1 MediumAugust 25, 2025
• kalcaddle kodbox An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information... CVE-2024-51037 5.3 MediumNovember 15, 2024
• kodcloud kodbox kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL... CVE-2023-52069 5.4 MediumJanuary 17, 2024
• kodcloud kodbox kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the... CVE-2023-52068 6.1 MediumJanuary 16, 2024
• kodcloud kodbox An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator... CVE-2023-39691 9.8 CriticalJanuary 16, 2024
• kodcloud kodexplorer Reflective Cross Site Scripting (XSS) vulnerability in KodeExplorer version 4.51, allows... CVE-2023-49489 6.1 MediumDecember 19, 2023
• collabora kodexplorer kalcaddle KodExplorer app.php index server-side request forgery CVE-2023-6853 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer app.php server-side request forgery CVE-2023-6852 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer ZIP Archive app.php unzipList code injection CVE-2023-6851 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer API Endpoint unrestricted upload CVE-2023-6850 6.3 MediumDecember 16, 2023
• kalcaddle kodbox kalcaddle kodbox app.php cover server-side request forgery CVE-2023-6849 7.3 HighDecember 16, 2023
• kalcaddle kodbox kalcaddle kodbox index.class.php check command injection CVE-2023-6848 7.3 HighDecember 16, 2023
• kodcloud kodbox kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the... CVE-2023-48028 9.8 CriticalNovember 17, 2023
• kodcloud kodbox kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in... CVE-2023-45998 5.4 MediumOctober 23, 2023
• kodcloud kodexplorer A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run... CVE-2021-36646 6.1 MediumSeptember 6, 2023
• kalcaddle kodbox kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection CVE-2023-3607 5.5 MediumJuly 10, 2023
• kodcloud kodexplorer KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of... CVE-2023-37153 6.1 MediumJuly 10, 2023
• kodcloud kodbox kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue. CVE-2023-29790 7.5 HighMay 12, 2023
• kodcloud kodbox kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information. CVE-2023-29791 6.1 MediumMay 11, 2023
• collabora kodexplorer kalcaddle KodExplorer cross-site request forgery CVE-2022-4944 Public exploit 4.3 MediumApril 22, 2023
• collabora kodexplorer Arbitrary file access in KodExplorer CVE-2022-46154 8.6 HighDecember 6, 2022