CVE-2022-4944 kalcaddle KodExplorer cross-site request forgery

What is CVE-2022-4944?

CVE-2022-4944 is a medium-severity vulnerability in kalcaddle KodExplorer, published on 22 Apr 2023.

Official description

A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.50 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227000.

Weakness: CWE-352

Which versions are affected by CVE-2022-4944?

It affects 1 product.

Products include Kodcloud Kodexplorer.

How do I fix CVE-2022-4944?

No fix has been published for CVE-2022-4944 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-4944 being exploited?

There is no known exploitation of CVE-2022-4944 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.

Other vulnerabilities in kalcaddle KodExplorer

• CVE-2022-46154 Arbitrary file access in KodExplorer High 8.6
• CVE-2023-6850 kalcaddle KodExplorer API Endpoint unrestricted upload Medium 6.3
• CVE-2023-6851 kalcaddle KodExplorer ZIP Archive app.php unzipList code injection Medium 6.3
• CVE-2023-6852 kalcaddle KodExplorer app.php server-side request forgery Medium 6.3
• CVE-2023-6853 kalcaddle KodExplorer app.php index server-side request forgery Medium 6.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-ph4w-h44m-m735.