Keep
Monthly
Server-side request forgery in Keep (keephq/keep) as of commit 91c75e0 lets unauthenticated attackers coerce the backend into issuing arbitrary outbound HTTP requests by POSTing a crafted host value to an unprotected providers healthcheck endpoint. Because the endpoint requires no authentication, a remote attacker can pivot into internal services and cloud metadata endpoints (e.g. 169.254.169.254) to steal cloud credentials and map internal networks. No public exploit identified at time of analysis, though the flaw was reported by VulnCheck and a corresponding GitHub issue is public; the CVSS 4.0 base score is 9.2 (Critical).
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Server-side request forgery in Keep (keephq/keep) as of commit 91c75e0 lets unauthenticated attackers coerce the backend into issuing arbitrary outbound HTTP requests by POSTing a crafted host value to an unprotected providers healthcheck endpoint. Because the endpoint requires no authentication, a remote attacker can pivot into internal services and cloud metadata endpoints (e.g. 169.254.169.254) to steal cloud credentials and map internal networks. No public exploit identified at time of analysis, though the flaw was reported by VulnCheck and a corresponding GitHub issue is public; the CVSS 4.0 base score is 9.2 (Critical).
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.