CNNVD-202507-1915 Information
CNNVD ID
CNNVD-202507-1915
Related CVE
- CNNVD Published: 2025-07-14
Description (Chinese)
kkFileViewOfficeEdit是YiJiuSmile个人开发者的一个文件在线预览及OFFICE的在线编辑软件。 kkFileViewOfficeEdit 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd及之前版本存在路径遍历漏洞，该漏洞源于文件/deleteFile中函数deleteFile对参数fileName的错误操作导致路径遍历。
Description (English)
kkFileViewOfficeEdit is an online preview of a file by YiJiuSmile personal developer and online editing software for OFFFICE. kkFileViewOfficeEdit 5fbc57c48e8fe8fe6c1b91e7995e2d59615f37abd and previous versions have path-crossing loopholes, which stem from the error of the deleteFile function in file/deleteFile to the parameter file name.
Hazard Level
High
Vulnerability Type
路径遍历
Affected Vendor
Live Support
Published
2025-07-14
Last Modified
2026-02-24
References
https://github.com/YiJiuSmile/kkFileViewOfficeEdit/issues/15 https://vuldb.com/?submit.609098 https://vuldb.com/?id.316329 https://vuldb.com/?ctiid.316329 https://access.redhat.com/security/cve/cve-2025-7628
Share on: