CVE-2026-116056
CVE-2026-116056 · KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 5.3 · Medium · EPSS 0.4%
- Published
- Updated
Affected products and versions
kodexplorer
- Versions
- 4.0: Affected
- 4.1: Affected
- 4.2: Affected
- 4.3: Affected
- 4.4: Affected
- 4.5: Affected
- 4.6: Affected
- 4.7: Affected
- 4.8: Affected
- 4.9: Affected
- 4.10: Affected
- 4.11: Affected
- 4.12: Affected
- 4.13: Affected
- 4.14: Affected
- 4.15: Affected
- 4.16: Affected
- 4.17: Affected
- 4.18: Affected
- 4.19: Affected
- 4.20: Affected
- 4.21: Affected
- 4.22: Affected
- 4.23: Affected
- 4.24: Affected
- 4.25: Affected
- 4.26: Affected
- 4.27: Affected
- 4.28: Affected
- 4.29: Affected
- 4.30: Affected
- 4.31: Affected
- 4.32: Affected
- 4.33: Affected
- 4.34: Affected
- 4.35: Affected
- 4.36: Affected
- 4.37: Affected
- 4.38: Affected
- 4.39: Affected
- 4.40: Affected
- 4.41: Affected
- 4.42: Affected
- 4.43: Affected
- 4.44: Affected
- 4.45: Affected
- 4.46: Affected
- 4.47: Affected
- 4.48: Affected
- 4.49: Affected
- 4.50: Affected
- 4.51: Affected
- 4.52: Affected
- 4.53: Affected
- 4.54: Affected
- 4.55: Affected
- 4.56: Affected
No fix published