Skip to content
OpenAdvisories

Product · Sipeed

PicoClaw

13 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.3

    Sipeed PicoClaw web.go web_fetch server-side request forgery

    A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has b…

  • High 7.3

    Sipeed PicoClaw Launcher access_control.go IPAllowlist access control

    A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack ma…