CVE-2020-8135

CRITICAL · CVSS 9.8 EPSS 1.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-03-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-8135

Severity

CRITICAL

CVSS

9.8

EPSS

1.33%

Original NVD Description

The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.