CNNVD-202508-2923 Information

CNNVD ID

CNNVD-202508-2923

CVE-2025-9414

  • CNNVD Published: 2025-08-25

Description (Chinese)

kodbox是warlee个人开发者的一个网络文件管理器。 kodbox 1.61版本存在代码问题漏洞,该漏洞源于对文件/?explorer/upload/serverDownload中参数url的错误操作导致服务端请求伪造。

Description (English)

kodbox is a web file manager for individual warlee developers. kodbox 1.61 has a code problem loophole, which stems from a mishandling of the url parameter in the file/?explorer/upload/serverDownload, resulting in the forgery of the service request.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

个人开发者

Published

2025-08-25

Last Modified

2026-02-24

References

https://vuldb.com/?submit.633727 https://vuldb.com/?id.321256 https://vuldb.com/?ctiid.321256 https://gist.github.com/SysEternals/a03d45b582451f243f9c24076593c49c https://nvd.nist.gov/vuln/detail/CVE-2025-9414

Share on: