CVE-2017-1002024

Published: Sep 14, 2017Modified: May 13, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.

Affected (21)

Products: Kindsoft: Kind Editor, Kindeditor

Kindsoft

2 products

Kind Editor

Kindeditor

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Kindsoft Kind Editor	Up to 3.5.6
Kindsoft Kind Editor	Version 4.0.1
Kindsoft Kind Editor	Version 4.0.2
Kindsoft Kind Editor	Version 4.0.3
Kindsoft Kind Editor	Version 4.0.4
Kindsoft Kind Editor	Version 4.0.5
Kindsoft Kind Editor	Version 4.0.6
Kindsoft Kind Editor	Version 4.0
Kindsoft Kind Editor	Version 4.1.10
Kindsoft Kind Editor	Version 4.1.11
Kindsoft Kind Editor	Version 4.1.1
Kindsoft Kind Editor	Version 4.1.2
Kindsoft Kind Editor	Version 4.1.3
Kindsoft Kind Editor	Version 4.1.4
Kindsoft Kind Editor	Version 4.1.5
Kindsoft Kind Editor	Version 4.1.6
Kindsoft Kind Editor	Version 4.1.7
Kindsoft Kind Editor	Version 4.1.8
Kindsoft Kind Editor	Version 4.1.9
Kindsoft Kind Editor	Version 4.1
Kindsoft Kindeditor	Version 4.1.12