GHSA-q24h-5rq3-63j9

Source

https://github.com/advisories/GHSA-q24h-5rq3-63j9

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/03/GHSA-q24h-5rq3-63j9/GHSA-q24h-5rq3-63j9.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-q24h-5rq3-63j9

Aliases

CVE-2022-0528

Published

2022-03-04T00:00:19Z

Modified

2023-11-08T04:07:35Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Incorrect Authorization in @uppy/companion

Details

@uppy/companion prior to version 3.3.1 is vulnerable to incorrect authorization. A user with URL upload access could enumerate internal companion server networks, send local webservers files to the destination server, and finally download them If each of these files had a guessable and regular name.

Database specific

{
    "cwe_ids":  [
        "CWE-200",
        "CWE-863",
        "CWE-918"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-03-10T21:57:56Z",
    "nvd_published_at":  "2022-03-03T07:15:00Z",
    "severity":  "HIGH"
}

References

Affected packages

npm / @uppy/companion

Package

Name: @uppy/companion; View open source insights on deps.dev
Purl: pkg:npm/%40uppy/companion

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.3.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/03/GHSA-q24h-5rq3-63j9/GHSA-q24h-5rq3-63j9.json"