CVE

CVE-2022-42149

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Updated Sep 28, 2026View on NVD →

S4E scanner

CVE-2022-42149 Scanner

CVE-2022-42149 Scanner - Server-Side Request Forgery vulnerability in kkFileView

Used 2.9k times · 3.3k assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.