Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Partkeepr Clear all filters
TI-2022-06955 CVE-2022-22702 · GHSA-5366-4wpf-vvr9

Server-side request forgery in PartKeepr

Priority LOW 21

PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user to carry out SSRF at…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00737 Published 2022-01-07 No fix listed CWE-918
TI-2022-06954 CVE-2022-22701 · GHSA-4vq7-xgx9-437g

Information disclosure in PartKeepr

Priority LOW 31

PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0105 Published 2022-01-07 No fix listed CWE-200