Description
Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
Remediation
References
https://github.com/transloadit/uppy/commit/267c34045a1e62c98406d8c31261c604a11e544a
https://huntr.dev/bounties/8b060cc3-2420-468e-8293-b9216620175b
Related Vulnerabilities
CVE-2009-0217 Vulnerability in maven package org.apache.santuario:xmlsec
CVE-2020-15252 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2022-34870 Vulnerability in maven package org.apache.geode:geode-pulse
CVE-2022-39243 Vulnerability in maven package com.zaxxer:nuprocess
CVE-2022-39312 Vulnerability in maven package io.dataease:dataease-plugin-common