CVE-2021-22255

SSRF in URL file upload in Baserow 1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address...

CVE-2021-22255

SSRF in URL file upload in Baserow 1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address...

CVE-2021-22255

CVE-2021-22255 targets Baserow prior to 1.1.0 with SSRF via the URL file upload feature. The root cause is improper validation/escaping in the URL file upload, enabling remote authenticated users to retrieve files from internal network resources exposed over HTTP by inserting an internal address....