CyberRota Analysis
AI-GeneratedA server-side request forgery vulnerability exists in the bytePlusDownloadVideo function of the GoClaw 3.13.3-beta.3 component, allowing attackers to manipulate the output.video_url argument. This could lead to unauthorized access to internal resources, potentially compromising the security of the affected system. Organizations using this version of GoClaw should prioritize patching this vulnerability to mitigate the risk of remote exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the function bytePlusDownloadVideo of the file internal/tools/create_video_byteplus.go of the component invoke Endpoint. The manipulation of the argument output.video_url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.