What the vulnerability does

01Description

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.

Key dates

02Disclosure timeline

July 20, 2020 CVE published
August 4, 2024 Record updated