2 results · Clear filters · Feed
-
High 7.3
Sipeed PicoClaw web.go web_fetch server-side request forgery
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has b…
-
High 7.3
Sipeed PicoClaw Launcher access_control.go IPAllowlist access control
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack ma…