Lucene search

K
osvGoogleOSV:CVE-2020-8205
HistoryJul 20, 2020 - 3:15 p.m.

CVE-2020-8205

2020-07-2015:15:16
Google
osv.dev
8

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%