Lucene search

K
osvGoogleOSV:CVE-2020-8135
HistoryMar 20, 2020 - 7:15 p.m.

CVE-2020-8135

2020-03-2019:15:12
Google
osv.dev
6

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

68.2%

The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

68.2%