Kiteworks Core.

Kiteworks Core user impersonation in a file-request feature

• Kiteworks Core
• Broken access control

Missing authentication on a Kiteworks appliance setup function

• Kiteworks Core
• Authentication bypass
• CWE-670

Kiteworks Core Improper Validation of Specified Quantity in Input

• Kiteworks Core
• CWE-1284

Kiteworks Core Local Privilege Escalation

• Kiteworks Core
• Command injection
• Privilege escalation

Kiteworks Core Local Privilege Escalation

• Kiteworks Core
• Path traversal
• Privilege escalation

Kiteworks Core OS Command Injection

• Kiteworks Core
• Command injection

Kiteworks Core Authentication Bypass in the Password Reset Workflow

• Kiteworks Core
• CWE-640

Kiteworks Core Remote Code Execution

• Kiteworks Core
• CWE-807
• CWE-940

Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation

• Kiteworks Core
• Path traversal
• Privilege escalation

Kiteworks Core OS Command Injection

• Kiteworks Core
• Command injection
• Privilege escalation

Kiteworks Core Incorrect Authorization

• Kiteworks Core
• Broken access control

Kiteworks Core Path Traversal

• Kiteworks Core
• Path traversal

Kiteworks Core Missing Authentication for Critical Function

• Kiteworks Core
• Authentication bypass
• CWE-670

Kiteworks Core Sandbox Escape

• Kiteworks Core
• Information disclosure
• CWE-653

Kiteworks Core Stored Cross-site Scripting (XSS)

• Kiteworks Core
• Cross-site scripting (XSS)

Kiteworks Core Incorrect Privilege Assignment

• Kiteworks Core
• Privilege escalation

Kiteworks Core Privilege Escalation through Improper Access Control

• Kiteworks Core
• Broken access control

Kiteworks Core Arbitrary File Write through Command Injection

• Kiteworks Core
• Command injection

Kiteworks Core Unprotected Alternate Channel

• Kiteworks Core
• CWE-420

Kiteworks Core Command Execution through Configuration Injection

• Kiteworks Core
• Other injection

Kiteworks Core Unrestricted Upload of File with Dangerous Type

• Kiteworks Core
• Unrestricted file upload

Kiteworks Core Server-Side Request Forgery (SSRF)

• Kiteworks Core
• Server-side request forgery (SSRF)

Kiteworks Core deserialization of untrusted data

• Kiteworks Core
• Insecure deserialization

Kiteworks Core Insufficient Verification of Data Authenticity

• Kiteworks Core
• CWE-345

Kiteworks Core Privilege Escalation through External Control of File Name or Path

• Kiteworks Core
• Path traversal
• Privilege escalation

Kiteworks Core Remote Code Execution through Server-Side Template Injection

• Kiteworks Core
• Code injection

Kiteworks Core stored XSS

• Kiteworks Core
• Cross-site scripting (XSS)

Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)

• Kiteworks Core
• Cross-site scripting (XSS)

Kiteworks Core Server-Side Request Forgery through CRLF Injection

• Kiteworks Core
• Other injection

Kiteworks Core OS command injection

• Kiteworks Core
• Command injection

Kiteworks Core arbitrary file write

• Kiteworks Core
• Path traversal

Kiteworks Core improper privilege management

• Kiteworks Core
• Privilege escalation

Kiteworks Core stored XSS

• Kiteworks Core
• Cross-site scripting (XSS)

Kiteworks Core content injection

• Kiteworks Core
• Open redirect

Kiteworks Core SQL Injection

• Kiteworks Core
• SQL injection

Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management

• kiteworks core
• CWE-282