CVE-2025-11016: kalcaddle kodbox index.class.php fileOut path traversal
A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileOut of the file app/controller/explorer/index.class.php. Such manipulation of the argument path leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11016?
CVE-2025-11016 is classified as a high severity vulnerability due to the potential for unauthorized file access through path traversal.
How do I fix CVE-2025-11016?
To fix CVE-2025-11016, upgrade kalcaddle kodbox to version 1.61.10 or later where the vulnerability has been addressed.
What systems are affected by CVE-2025-11016?
CVE-2025-11016 affects kalcaddle kodbox versions up to and including 1.61.09.
What type of attack does CVE-2025-11016 allow?
CVE-2025-11016 allows attackers to perform remote path traversal attacks that can compromise the integrity of the file system.
In what component does CVE-2025-11016 reside?
CVE-2025-11016 resides in the fileOut function of the file app/controller/explorer/index.class.php.