CyberRota Analysis
AI-GeneratedA vulnerability exists in the Guarded Web Fetch Flow of Sipeed PicoClaw versions up to 0.2.9, specifically in the WebFetchTool.Execute function, which is susceptible to server-side request forgery (SSRF). This flaw allows remote attackers to manipulate requests, potentially leading to unauthorized access to internal resources. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation, especially if they handle sensitive data or rely on internal services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulnerability is the function WebFetchTool.Execute of the file pkg/tools/integration/web.go of the component Guarded Web Fetch Flow. The manipulation results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.