Description
Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
Remediation
References
https://github.com/transloadit/uppy/commit/267c34045a1e62c98406d8c31261c604a11e544a
https://huntr.dev/bounties/8b060cc3-2420-468e-8293-b9216620175b
Related Vulnerabilities
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-beam
CVE-2023-37950 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration
CVE-2021-4307 Vulnerability in maven package org.webjars.bower:baobab
CVE-2013-6465 Vulnerability in maven package org.jbpm:jbpm-console-ng-human-tasks-client
CVE-2020-14968 Vulnerability in maven package org.webjars.npm:jsrsasign