An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface

A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later executes arbitrary JavaScript in the authenticated session of an administrator who views the affec…

Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto another node and cause them to be executed there

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to …