CVE-2022-22702

PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to…

published January 7, 2022

CVSS
—
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user to carry out SSRF attacks and port enumeration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Published
2022-01-07T22:00Z
EPSS history
Timeline
  • 07 JAN 22:00Z
    PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to…
    cvelistv5