Design/Logic Flaw

2021-08-2018:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

JSON

SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address.

CPENameOperatorVersion
baserowge0.6.0
baserowlt1.1.0

CPE	Name	Operator	Version
	baserow	ge	0.6.0
	baserow	lt	1.1.0

References

baserow.io/blog/march-2021-release-of-baserow

gitlab.com/bramw/baserow/-/issues/370

gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22255.json