Vulnerabilities > CVE-2020-8135 - Server-Side Request Forgery (SSRF) vulnerability in Uppy 1.9.1/1.9.2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
uppy
CWE-918

Summary

The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.

Vulnerable Configurations

Part Description Count
Application
Uppy
2

Common Weakness Enumeration (CWE)