CVE-2022-22702: Partkeepr

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user to carry out SSRF attacks and port enumeration.

Affected products

• Partkeepr Partkeepr: up to and including 1.4.0

Published 2022-01-10. Last modified 2026-06-17.