CVE-2022-42149: Keking Kkfileview

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

Affected products

• Keking Kkfileview: version 4.0.0 only

Published 2022-10-17. Last modified 2026-06-17.