← CVE Intelligence

CVE-2020-8205

n/a / uppy PUBLISHED

Description (CNA)

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.

Affected (CNA)

Vendor / productVersions
n/a / uppyaffected Fixed Versions: 1.13.2, 2.0.0-alpha.5

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.