CVE-2025-11016
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
kalcaddle kodbox up to version 1.61.09 has a path traversal vulnerability in the fileOut function in app/controller/explorer/index.class.php. Manipulation of the path argument allows remote attack. The exploit has been publicly disclosed and may be used. The vendor was contacted but did not respond.
Risk Assessment
A remote attacker can exploit this to read or write arbitrary files on the server, potentially leading to disclosure of sensitive data or full system compromise.
Recommendation
Apply available patches immediately or temporarily disable the affected functionality. Also monitor logs for suspicious requests.
Other vulnerabilities in kodbox
See all- CVE-2026-18721Medium
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02 in the file /user/sso/apiLogin of the SSO API Login component. Manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-5618Medium
In kodbox up to version 1.64, a Server-Side Request Forgery (SSRF) vulnerability exists in the shareMake/shareCheck component. Manipulating the siteFrom/siteTo arguments allows server-side requests. The attack is remote but difficult. The exploit is public. The vendor did not respond.
- CVE-2024-51037Medium
A vulnerability in kodbox version 1.52.04 and earlier allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.
Original NVD description (English source)
A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileOut of the file app/controller/explorer/index.class.php. Such manipulation of the argument path leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS