Lucene search
GoogleOSV:GHSA-Q24H-5RQ3-63J9HistoryMar 04, 2022 - 12:00 a.m.
Incorrect Authorization in @uppy/companion
2022-03-0400:00:19
Google
osv.dev
3
0.001 Low
EPSS
Percentile
51.1%
@uppy/companion prior to version 3.3.1 is vulnerable to incorrect authorization. A user with URL upload access could enumerate internal companion server networks, send local webservers files to the destination server, and finally download them If each of these files had a guessable and regular name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @uppy/companion | lt | 3.3.1 |
Related
veracode
veracode
Information Disclosure
2022-03-04 06:32:25
nvd
nvd
CVE-2022-0528
2022-03-03 07:15:06
cvelist
cvelist
CVE-2022-0528 Server-Side Request Forgery (SSRF) in transloadit/uppy
2022-03-03 07:00:11
cve
cve
CVE-2022-0528
2022-03-03 07:15:06
cnvd
cnvd
Uppy Access Control Error Vulnerability
2022-03-07 00:00:00
github
github
Incorrect Authorization in @uppy/companion
2022-03-04 00:00:19
huntr
huntr
prion
prion
Server side request forgery (ssrf)
2022-03-03 07:15:00
osv
osv
CVE-2022-0528
2022-03-03 07:15:06