An authentication bypass vulnerability in KodExplorer permits unauthenticated remote attackers to manipulate file retrieval functions, posing a significant risk to system integrity.

This is an improper authentication vulnerability (CWE-287) located in the fileGet function within /app/controller/share.class.php, which can be triggered by an unauthenticated remote attacker.

Successful exploitation of this vulnerability allows unauthorized access to file retrieval processes, which could lead to sensitive information disclosure or unauthorized data manipulation. With a CVSS score of 7.3, this flaw is categorized as High severity, indicating a substantial risk to systems that store or manage critical business documents.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the affected fileGet endpoint at the network level or via a WAF until a vendor-supplied update is released.

Proactive Monitoring: Monitor web server access logs for anomalous requests targeting /app/controller/share.class.php, particularly those containing suspicious fileUrl parameters.

Compensating Controls: Deploy Web Application Firewall rules to block requests that attempt to pass malicious or unexpected input to the fileUrl argument in the identified controller.

Public Exploit Available: Unknown.

Given the High severity of this authentication bypass and the vendor's non-responsive status, it is critical to limit the exposure of the KodExplorer instance to untrusted networks. Organizations should implement strict perimeter filtering and monitor for any attempts to access the vulnerable endpoint while awaiting further guidance or a security update from the vendor.