Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-36qx-4ghf-xq84

Опубликовано: 24 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 7.1

Описание

OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.

OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.

EPSS

Процентиль: 10%
0.00202
Низкий

5.1 Medium

CVSS4

7.1 High

CVSS3

Дефекты

CWE-184
CWE-918

Связанные уязвимости

CVSS3: 7.1
nvd
5 месяцев назад

OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.

EPSS

Процентиль: 10%
0.00202
Низкий

5.1 Medium

CVSS4

7.1 High

CVSS3

Дефекты

CWE-184
CWE-918