Vulnerabilities > CVE-2020-8135 - Server-Side Request Forgery (SSRF) vulnerability in Uppy 1.9.1/1.9.2

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
uppy
CWE-918
critical

Summary

The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.

Vulnerable Configurations

Part Description Count
Application
Uppy
2

Common Weakness Enumeration (CWE)