CVE-2022-22702
N/A
N/A
Summary
PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user to carry out SSRF attacks and port enumeration.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | PartKeepr | 1.4.0 | affected |
Weaknesses
- Server-side request forgery
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.