3 matches found
CVE-2022-0086
uppy is vulnerable to Server-Side Request Forgery SSRF...
9.8CVSS6.7AI score0.01207EPSS
SaveExploits1References1
CVE-2022-0086 Server-Side Request Forgery (SSRF) in transloadit/uppy
uppy is vulnerable to Server-Side Request Forgery SSRF...
8.2CVSS9.7AI score0.01207EPSS
SaveExploits1References2
CVE-2022-0086
CVE-2022-0086 affects uppy (transloadit/uppy) via a Server-Side Request Forgery (SSRF) vulnerability. Multiple connected advisories corroborate an SSRF in uppy, with some sources noting potential exploitation involving IPv4‑mapped IPv6 addresses (e.g., the isPrivateIP check in request.js). The Re...
9.8CVSS7.7AI score0.01207EPSS
SaveExploits1References2Affected Software1
20