Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2022-0528

Disclosure Date: March 03, 2022 (last updated February 23, 2025)
Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
Attacker Value
Unknown

CVE-2021-44150

Disclosure Date: November 22, 2021 (last updated February 23, 2025)
The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.
Attacker Value
Unknown

CVE-2020-8205

Disclosure Date: July 20, 2020 (last updated February 21, 2025)
The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.