7.5
CVE-2026-15317
- EPSS 0.25%
- Veröffentlicht 10.07.2026 00:00:13
- Zuletzt bearbeitet 14.07.2026 02:16:53
- CVE-Watchlists
- Unerledigt
Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulnerability is the function WebFetchTool.Execute of the file pkg/tools/integration/web.go of the component Guarded Web Fetch Flow. The manipulation results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerSipeed
≫
Produkt
PicoClaw
Version
0.2.0
Status
affected
Version
0.2.1
Status
affected
Version
0.2.2
Status
affected
Version
0.2.3
Status
affected
Version
0.2.4
Status
affected
Version
0.2.5
Status
affected
Version
0.2.6
Status
affected
Version
0.2.7
Status
affected
Version
0.2.8
Status
affected
Version
0.2.9
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.159 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 2.1 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 6.3 | 2.8 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
|
| cna@vuldb.com | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-918 Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
https://vuldb.com/vuln/377257
https://vuldb.com/vuln/377257/cti
https://vuldb.com/cve/CVE-2026-15317
https://vuldb.com/submit/852877
https://github.com/sipeed/picoclaw/issues/3078
https://github.com/sipeed/picoclaw/