CVE-2022-46154: Arbitrary file access in KodExplorer
Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not prevent unauthenticated users from requesting arbitrary files from the host OS file system. As a result any files available to the host process may be accessed by arbitrary users. This issue has been addressed in version 4.50. Users are advised to upgrade. There are no known workarounds for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-46154?
CVE-2022-46154 is a vulnerability in Kodexplorer, a Chinese language web-based file manager and browser-based code editor.
What is the severity of CVE-2022-46154?
CVE-2022-46154 has a severity rating of 7.5 (high).
How does CVE-2022-46154 affect Kodexplorer?
CVE-2022-46154 allows unauthenticated users to request arbitrary files from the host OS file system, potentially giving them access to files available to the host process.
Which versions of Kodexplorer are affected by CVE-2022-46154?
Versions prior to 4.50 of Kodexplorer are affected by CVE-2022-46154.
How can I fix CVE-2022-46154 in Kodexplorer?
To fix CVE-2022-46154, make sure to update Kodexplorer to version 4.50 or later.