CVE-2020-8205

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.

• CWE-918
• CWE-918

• https://hackerone.com/reports/891270Exploit, Issue Tracking, Third Party Advisory
• https://hackerone.com/reports/891270Exploit, Issue Tracking, Third Party Advisory

Published

Jul 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8199Improper access control in Citrix ADC Gateway Linux client v…7.8
• CVE-2020-8200Improper authentication in Citrix StoreFront Server < 1912.0…6.5
• CVE-2020-8201Node.js < 12.18.4 and < 14.11 can be exploited to perform HT…7.4
• CVE-2020-8202Improper check of inputs in Nextcloud Preferred Providers ap…5.3
• CVE-2020-8203Prototype pollution attack when using _.zipObjectDeep in lod…7.4
• CVE-2020-8204A cross site scripting (XSS) vulnerability exists in Pulse C…6.1
• CVE-2020-8206An improper authentication vulnerability exists in Pulse Con…8.1
• CVE-2020-8207Improper access control in Citrix Workspace app for Windows …8.8
• CVE-2020-8208Improper input validation in Citrix XenMobile Server 10.12 b…6.1
• CVE-2020-8209Improper access control in Citrix XenMobile Server 10.12 bef…7.5
• CVE-2020-8210Insufficient protection of secrets in Citrix XenMobile Serve…7.5
• CVE-2020-8211Improper input validation in Citrix XenMobile Server 10.12 b…9.8