Description
The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.
Remediation
References
https://hackerone.com/reports/891270
Related Vulnerabilities
CVE-2022-37223 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2020-21125 Vulnerability in maven package com.bstek.ureport:ureport2-console
CVE-2023-45277 Vulnerability in maven package org.yamcs:yamcs-core
CVE-2022-24697 Vulnerability in maven package org.apache.kylin:kylin-server-base