Description

Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.

Remediation

References

https://huntr.dev/bounties/8b060cc3-2420-468e-8293-b9216620175b

https://github.com/transloadit/uppy/commit/267c34045a1e62c98406d8c31261c604a11e544a

Related Vulnerabilities

CVE-2020-13822 Vulnerability in npm package elliptic

CVE-2023-43794 Vulnerability in npm package nocodb

CVE-2016-10541 Vulnerability in npm package shell-quote

CVE-2017-16077 Vulnerability in npm package mongose

CVE-2023-48711 Vulnerability in npm package google-translate-api-browser

Severity

High

Classification

CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Patch Third Party Advisory