Read the docs

Partkeepr

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Partkeepr records in CISA KEV

No Partkeepr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Partkeepr 4 records LOW

Records

4 records in Partkeepr · all components

TI-2022-06954 CVE-2022-22701 · GHSA-4vq7-xgx9-437g

Information disclosure in PartKeepr

Priority LOW 31

PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0105 Published 2022-01-07 No fix listed CWE-200
TI-2022-06955 CVE-2022-22702 · GHSA-5366-4wpf-vvr9

Server-side request forgery in PartKeepr

Priority LOW 21

PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user to carry out SSRF at…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00737 Published 2022-01-07 No fix listed CWE-918
Open these records in search →