CVE-2026-10583
MEDIUM
NVD
CVSS Score
4.7
Severity
MEDIUM
Published
Jun 02, 2026
Vendor
unknown
Description
A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. Affected by this issue is the function Import of the file internal/http/tts_config.go of the component TTS Configuration Endpoint. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.