kkFileView SSRF Vulnerability

kkFileView versions 4.2.0 and later are affected by a Server-Side Request Forgery (SSRF) vulnerability.

The /getCorsFile endpoint is supposed to be protected by TrustHostFilter, but the filter validates a different parameter than the one used by the controller, leading to unauthorized access.