Open Redirect Vulnerability in kkFileView File Server

Executive Summary

This vulnerability is an open redirect issue in kekingcn kkFileView up to version 5.0.3. It affects the BaseUrlFilter.getBaseUrl function where manipulating the X-Base-Url header can redirect users to malicious sites. The attack is remote and publicly disclosed.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your system is running kkFileView up to version 5.0.3. Inspect HTTP headers for the X-Base-Url parameter in requests to the affected endpoint. Look for open redirect behavior when manipulating this parameter.

Useful 0 Not Useful 0

Impact Analysis

An attacker could trick users into visiting a malicious site by redirecting them through a legitimate-looking link. This may lead to phishing attacks, credential theft, or malware downloads. Users of vulnerable versions are at risk.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR or HIPAA by enabling phishing attacks that compromise user data or protected health information. Organizations must patch to prevent unauthorized access and maintain compliance.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade to the latest version of kkFileView (5.0.3 or higher) to address security fixes. If upgrading is not possible, disable the affected BaseUrlFilter or restrict access to the vulnerable endpoint. Monitor network traffic for suspicious redirect attempts.

Useful 0 Not Useful 0