Lucene search
PRIOn knowledge basePRION:CVE-2020-8205HistoryJul 20, 2020 - 3:15 p.m.
Server side request forgery (ssrf)
2020-07-2015:15:00
PRIOn knowledge base
www.prio-n.com
5
0.004 Low
EPSS
Percentile
74.2%
The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uppy | eq | 2.0.0 alpha1 | |
| uppy | eq | 2.0.0 alpha2 | |
| uppy | eq | 2.0.0 alpha3 | |
| uppy | eq | 2.0.0 alpha4 | |
| uppy | eq | 2.0.0 alpha0 | |
| uppy | lt | 1.13.2 |
References
Related
osv
osv
CVE-2020-8205
2020-07-20 15:15:16
Server-Side Request Forgery in @uppy/companion
2020-08-13 18:54:19
cve
cve
CVE-2020-8205
2020-07-20 15:15:16
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Transloadit Uppy
2020-12-01 09:45:48
cvelist
cvelist
CVE-2020-8205
2020-07-20 15:00:53
nvd
nvd
CVE-2020-8205
2020-07-20 15:15:16
hackerone
hackerone
github
github
Server-Side Request Forgery in @uppy/companion
2020-08-13 18:54:19
veracode
veracode
Server-Side Request Forgery (SSRF)
2020-06-29 02:56:26