CVE-2020-8205CWE-918

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local…

published July 20, 2020

CVSS
—
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01190 · 67.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2020-07-20T15:00Z
EPSS history
Timeline
  • 20 JUL 15:00Z
    The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local…
    cvelistv5