Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user to carry out SSRF attacks and port enumeration.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PartKeepr 代码问题漏洞
Vulnerability Description
PartKeepr是一个库存管理软件。主要为电子元件设计。 PartKeepr 存在安全漏洞，该漏洞源于在创建部件时使用 URL 上传附件的功能不会验证是否可以向本地端口发出请求，从而允许经过身份验证的用户执行 SSRF 攻击和端口枚举。
CVSS Information
N/A
Vulnerability Type
N/A