Description
uppy is vulnerable to Server-Side Request Forgery (SSRF)
Remediation
References
https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f
https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122
Related Vulnerabilities
CVE-2022-1295 Vulnerability in maven package org.webjars.bower:fullpage
CVE-2022-25171 Vulnerability in npm package p4
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-trino
CVE-2017-16005 Vulnerability in npm package http-signature
CVE-2010-4207 Vulnerability in maven package org.webjars:yui