Description

uppy is vulnerable to Server-Side Request Forgery (SSRF)

Remediation

References

https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f

https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122

Related Vulnerabilities

CVE-2021-42392 Vulnerability in maven package com.h2database:h2

CVE-2022-39263 Vulnerability in npm package @next-auth/upstash-redis-adapter

CVE-2014-3741 Vulnerability in npm package printer

CVE-2021-43821 Vulnerability in maven package org.opencastproject:opencast-ingest-service-impl

CVE-2022-22984 Vulnerability in npm package snyk

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Third Party Advisory Exploit NVD-CWE-noinfo