Lucene search
GoogleOSV:GHSA-9M4X-8W29-R78GHistoryAug 13, 2020 - 6:54 p.m.
Server-Side Request Forgery in @uppy/companion
2020-08-1318:54:19
Google
osv.dev
7
0.004 Low
EPSS
Percentile
74.2%
The @uppy/companion npm package before versions 1.13.2 and 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @uppy/companion | lt | 1.13.2 | |
| @uppy/companion | ge | 2.0.0-alpha.0 | |
| @uppy/companion | lt | 2.0.0-alpha.5 |
Related
osv
osv
CVE-2020-8205
2020-07-20 15:15:16
cve
cve
CVE-2020-8205
2020-07-20 15:15:16
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Transloadit Uppy
2020-12-01 09:45:48
cvelist
cvelist
CVE-2020-8205
2020-07-20 15:00:53
nvd
nvd
CVE-2020-8205
2020-07-20 15:15:16
prion
prion
Server side request forgery (ssrf)
2020-07-20 15:15:00
hackerone
hackerone
github
github
Server-Side Request Forgery in @uppy/companion
2020-08-13 18:54:19
veracode
veracode
Server-Side Request Forgery (SSRF)
2020-06-29 02:56:26