kodbox vulnerabilities
3 known CVE vulnerabilities in kodbox, translated and rated.
- CVE-2026-18721Medium
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02 in the file /user/sso/apiLogin of the SSO API Login component. Manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-5618Medium
In kodbox up to version 1.64, a Server-Side Request Forgery (SSRF) vulnerability exists in the shareMake/shareCheck component. Manipulating the siteFrom/siteTo arguments allows server-side requests. The attack is remote but difficult. The exploit is public. The vendor did not respond.
- CVE-2024-51037Medium
A vulnerability in kodbox version 1.52.04 and earlier allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.