Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository transloadit/uppy prior to 3.3.1...

CVE-2022-0528

CVE-2022-0528 is a Server-Side Request Forgery (SSRF) in transloadit/uppy and @uppy/companion prior to 3.3.1. The underlying issue is an access control error that could allow an unauthorized attacker to access sensitive information from GitHub repositories and, under certain conditions, enumerate...

CVE-2022-0528 Server-Side Request Forgery (SSRF) in transloadit/uppy

Server-Side Request Forgery SSRF in GitHub repository transloadit/uppy prior to 3.3.1...

Uppy 代码问题漏洞

Uppy is a Transloadit open source open source file uploader for web browsers. versions prior to Uppy 3.3.1 contain an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An unauthorized attacke...

uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)

uppy's companion module is vulnerable to Server-Side Request Forgery SSRF via IPv4-mapped IPv6 addresses...

GHSA-X8RQ-RC7X-5FG5 uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)

uppy's companion module is vulnerable to Server-Side Request Forgery SSRF via IPv4-mapped IPv6 addresses...

CVE-2022-0086

uppy is vulnerable to Server-Side Request Forgery SSRF...

Server side request forgery (ssrf)

uppy is vulnerable to Server-Side Request Forgery SSRF...

CVE-2022-0086 Server-Side Request Forgery (SSRF) in transloadit/uppy

uppy is vulnerable to Server-Side Request Forgery SSRF...

CVE-2022-0086

CVE-2022-0086 affects uppy (transloadit/uppy) via a Server-Side Request Forgery (SSRF) vulnerability. Multiple connected advisories corroborate an SSRF in uppy, with some sources noting potential exploitation involving IPv4‑mapped IPv6 addresses (e.g., the isPrivateIP check in request.js). The Re...

CVE-2022-0086

uppy is vulnerable to Server-Side Request Forgery SSRF...

CVE-2022-0086 Server-Side Request Forgery (SSRF) in transloadit/uppy

uppy is vulnerable to Server-Side Request Forgery SSRF...

Uppy 代码问题漏洞

Uppy is an open source file uploader for web browsers from Transloadit Open Source. A code issue vulnerability exists in uppy that allows an attacker to conduct server-side request forgery SSRF attacks...

Server-Side Request Forgery (SSRF) in transloadit/uppy

Description Uppy is vulnerable to SSRF through IPv4-mapped IPv6 addresses - https://www.ibm.com/docs/en/zos/2.1.0?topic=addresses-ipv4-mapped-ipv6 The report at https://hackerone.com/reports/786956 does not fix it because it uses a easily bypassable deny list in...

Server-Side Request Forgery in @uppy/companion

Versions of @uppy/companion prior to 1.9.3 are vulnerable to Server-Side Request Forgery SSRF. The get route passes the user-controlled variable req.body.url to a GET request without sanitizing the value. This allows attackers to inject arbitrary URLs and make GET requests on behalf of the server...

GHSA-MM7R-265W-JV6F Server-Side Request Forgery in @uppy/companion

Versions of @uppy/companion prior to 1.9.3 are vulnerable to Server-Side Request Forgery SSRF. The get route passes the user-controlled variable req.body.url to a GET request without sanitizing the value. This allows attackers to inject arbitrary URLs and make GET requests on behalf of the server...

Server-Side Request Forgery in @uppy/companion

The @uppy/companion npm package before versions 1.13.2 and 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems...

uppy npm package code issue vulnerability

uppy npm package is a file upload package. A code issue vulnerability exists in uppy npm package versions prior to 1.13.2 and prior to 2.0.0-alpha.5. An attacker can exploit this vulnerability to scan local or external networks or interact with internal systems...

CVE-2020-8205

The uppy npm package 1.13.2 and 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems...

CVE-2020-8205

The uppy npm package 1.13.2 and 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems...