CVE-2026-33314 in pyLoad정보

요약 (영어)

pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, a Host Header Spoofing vulnerability in the @local_check decorator allows unauthenticated external attackers to bypass local-only restrictions. This grants access to the Click'N'Load API endpoints, enabling attackers to remotely queue arbitrary downloads, leading to Server-Side Request Forgery (SSRF) and Denial of Service (DoS). This issue has been patched in version 0.5.0b3.dev97.

책임이 있는

GitHub_M

예약하다

2026. 03. 18.

공개

2026. 03. 24.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
352844	pyLoad Click'N'Load API local_check 약한 인증	287	정의되지 않음	공식 수정	CVE-2026-33314

설명

CPE

CWE

CVSS

익스플로잇

역사

차이

연결하다

위협 인텔리전스

API JSON

API XML

API CSV

◂ 이전개요다음 ▸

Want to know what is going to be exploited?

We predict KEV entries!