CNNVD-202507-1910 Information

Jul 14, 2025 cve

CNNVD ID

CNNVD-202507-1910

CVE-2025-7626

CNNVD Published: 2025-07-14

Description (Chinese)

kkFileViewOfficeEdit是YiJiuSmile个人开发者的一个文件在线预览及OFFICE的在线编辑软件。 kkFileViewOfficeEdit 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd及之前版本存在路径遍历漏洞，该漏洞源于文件/onlinePreview中函数onlinePreview对参数url的错误操作导致路径遍历。

Description (English)

kkFileViewOfficeEdit is an online preview of a file by YiJiuSmile personal developer and online editing software for OFFFICE. kkFileViewOfficeEdit 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and previous versions have path-crossing loopholes, which stem from the error of the onlinePreview function for url.

Hazard Level

High

Vulnerability Type

路径遍历

Affected Vendor

Live Support

Published

2025-07-14

Last Modified

2026-02-24

References

https://github.com/YiJiuSmile/kkFileViewOfficeEdit/issues/13 https://vuldb.com/?ctiid.316327 https://vuldb.com/?submit.609078 https://vuldb.com/?id.316327 https://access.redhat.com/security/cve/cve-2025-7626

Share on: