PyPI/inventree: medium 4.3
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
Action: Upgrade inventree to 0.16.5 or later.
pip install inventree==0.16.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.5 | - |
Fixed versions
| 0.16.5 |
Sources
- osv: GHSA-vx3h-qwqw-r2wq
- https://github.com/inventree/InvenTree/security/advisories/GHSA-vx3h-qwqw-r2wq
- https://github.com/inventree/InvenTree/commit/5759b60a48e7e178fb417a900ed543f29dc5dc86
- https://github.com/inventree/InvenTree
published · modified · JSON