CVE-2022-29349

Published May 25th, 2022

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.

kekingcn/kkFileView

Universal File Online Preview Project based on Spring-Boot

GitHub

14.2K