CVE-2021-22255

CVE-2021-22255 targets Baserow prior to 1.1.0 with SSRF via the URL file upload feature. The root cause is improper validation/escaping in the URL file upload, enabling remote authenticated users to retrieve files from internal network resources exposed over HTTP by inserting an internal address....

PT-2021-14918

Name of the Vulnerable Software and Affected Versions: Baserow versions prior to 1.1.0 Description: The issue allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address in the URL file upload. This is due to a Server-Sid...

Baserow 代码问题漏洞

Baserow is an open source no-code database and Airtable replacement. A security vulnerability exists in Baserow versions prior to 1.1.0, which stems from the URL file upload feature of the software not validating and escaping parameters. This allowed a remote authenticated user to retrieve networ...

CVE-2021-22255: Server-Side Request Forgery (SSRF)

SSRF in URL file upload in Baserow 1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address...