kalcaddle kodbox loginSubmit API index.class.php क्रॉस-साइट रिक्वेस्ट फोर्जरी

The XSRF vulnerability in kalcaddle kodbox allows an attacker to craft malicious requests that appear to originate from a legitimate user. By tricking a logged-in user into clicking a crafted link or visiting a malicious website, the attacker can execute actions such as changing passwords, modifying data, or performing other privileged operations. The public availability of an exploit significantly increases the risk of exploitation. The low CVSS score reflects the difficulty of exploitation, but the potential impact remains concerning, especially in environments where user accounts have elevated privileges.

Organizations using kalcaddle kodbox version 1.64–1.64, particularly those with shared hosting environments or where user accounts have administrative privileges, are at significant risk. Users who frequently interact with the loginSubmit API are also more vulnerable.

• php / web:

grep -r 'bind/index.class.php' /workspace/source-code/plugins/oauth/

• generic web:

curl -I https://your-kodbox-instance/workspace/source-code/plugins/oauth/controller/bind/index.class.php | grep -i '200 OK'

1. 2026-03-23Disclosure

   disclosure

1. आरक्षित2026-03-22
2. प्रकाशित2026-03-23
3. EPSS अद्यतन2026-03-31

The primary mitigation for CVE-2026-4590 is to upgrade to a patched version of kalcaddle kodbox. Since a fixed version is not specified, consider implementing additional security measures as a temporary workaround. These include implementing strict input validation on the loginSubmit API to sanitize the 'third' argument and preventing unauthorized modifications. Employing a Web Application Firewall (WAF) with XSRF protection rules can also help mitigate the risk. Regularly review access logs for suspicious activity and implement multi-factor authentication to reduce the impact of successful attacks. After applying mitigations, verify the integrity of user accounts and data.