{"id":"CVE-2022-4944","summary":"kalcaddle KodExplorer cross-site request forgery","details":"A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.50 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227000.","modified":"2026-10-22T10:35:05.719532343Z","published":"2023-04-22T18:00:05.128Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-352"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4944.json","unresolved_ranges":[{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"4.0"},{"last_affected":"4.0"},{"introduced":"4.3"},{"last_affected":"4.3"},{"introduced":"4.4"},{"last_affected":"4.4"},{"introduced":"4.5"},{"last_affected":"4.5"},{"introduced":"4.6"},{"last_affected":"4.6"},{"introduced":"4.7"},{"last_affected":"4.7"},{"introduced":"4.8"},{"last_affected":"4.8"},{"introduced":"4.9"},{"last_affected":"4.9"},{"introduced":"4.10"},{"last_affected":"4.10"},{"introduced":"4.11"},{"last_affected":"4.11"},{"introduced":"4.12"},{"last_affected":"4.12"},{"introduced":"4.13"},{"last_affected":"4.13"},{"introduced":"4.14"},{"last_affected":"4.14"},{"introduced":"4.15"},{"last_affected":"4.15"},{"introduced":"4.16"},{"last_affected":"4.16"},{"introduced":"4.17"},{"last_affected":"4.17"},{"introduced":"4.18"},{"last_affected":"4.18"},{"introduced":"4.19"},{"last_affected":"4.19"},{"introduced":"4.20"},{"last_affected":"4.20"},{"introduced":"4.26"},{"last_affected":"4.26"},{"introduced":"4.27"},{"last_affected":"4.27"},{"introduced":"4.28"},{"last_affected":"4.28"},{"introduced":"4.29"},{"last_affected":"4.29"},{"introduced":"4.30"},{"last_affected":"4.30"},{"introduced":"4.31"},{"last_affected":"4.31"},{"introduced":"4.33"},{"last_affected":"4.33"},{"introduced":"4.37"},{"last_affected":"4.37"},{"introduced":"4.40"},{"last_affected":"4.40"},{"introduced":"4.41"},{"last_affected":"4.41"},{"introduced":"4.42"},{"last_affected":"4.42"},{"introduced":"4.43"},{"last_affected":"4.43"},{"introduced":"4.44"},{"last_affected":"4.44"},{"introduced":"4.48"},{"last_affected":"4.48"}]}]}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4944.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4944"},{"type":"ADVISORY","url":"https://vuldb.com/?id.227000"},{"type":"REPORT","url":"https://github.com/kalcaddle/KodExplorer/issues/512"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.227000"},{"type":"FIX","url":"https://github.com/kalcaddle/KodExplorer/releases/tag/4.50"},{"type":"EVIDENCE","url":"https://www.mediafire.com/file/709i2vxybergtg7/poc.zip/file"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kalcaddle/kodexplorer","events":[{"introduced":"4b6e9822ff763037129a1ddca764d51a5783f0b9"},{"fixed":"1f7072c0e12150686f10ee8cda82c004f04be98c"}],"database_specific":{"extracted_events":[{"strategy":"StandaloneSingleVersion","range":[{"introduced":"4.1"},{"last_affected":"4.1"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"4.2"},{"last_affected":"4.2"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"4.21"},{"last_affected":"4.21"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"4.22"},{"last_affected":"4.22"}]},{"range":[{"introduced":"4.23"},{"last_affected":"4.23"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"4.24"},{"last_affected":"4.24"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"4.25"},{"last_affected":"4.25"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"4.32"},{"last_affected":"4.32"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"4.34"},{"last_affected":"4.34"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"4.35"},{"last_affected":"4.35"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"4.36"},{"last_affected":"4.36"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"4.38"},{"last_affected":"4.38"}],"source":"AFFECTED_FIELD"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"4.39"},{"last_affected":"4.39"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"4.45"},{"last_affected":"4.45"}]},{"range":[{"introduced":"4.46"},{"last_affected":"4.46"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"4.47"},{"last_affected":"4.47"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"4.49"},{"last_affected":"4.49"}]},{"source":"REFERENCES_TAG","original_tag":"4.50","range":[{"fixed":"1f7072c0e12150686f10ee8cda82c004f04be98c"}]}]}}],"versions":["4.1","4.2","4.21","4.22","4.23","4.24","4.25","4.32","4.34","4.35","4.36","4.38","4.39","4.45","4.46","4.47","4.49","4.49.02","4.48.02","4.48.01","v4.45"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-4944.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}]}