Kodcloud KodExplorer Improper Authentication Vulnerability in FileGet Endpoint

A critical vulnerability allowing improper authentication has been identified in kodcloud KodExplorer versions through 4.52. The issue resides in the fileGet function within share.class.php. The vulnerability can be exploited remotely by manipulating the fileUrl argument, leading to unauthorized access. This flaw allows attackers to read local services, internal web applications, and instance metadata without authentication, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to internal services and sensitive metadata, significantly increasing the risk compared to typical blind server-side request forgery (SSRF) vulnerabilities.