Description
SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PiExtract | SOOP-CLM | 5.2, 5.3 | — |
References
- https://www.twcert.org.tw/tw/cp-132-10421-5cf6b-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10422-e06c3-2.html third-party-advisory