High severity7.7NVD Advisory· Published Aug 20, 2021· Updated Jun 17, 2026

CVE-2021-22255

Description

SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Baserow/Baserow2 versions
cpe:2.3:a:baserow:baserow:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:baserow:baserow:*:*:*:*:*:*:*:*range: >=0.6.0,<1.1.0
- (no CPE)range: <1.1.0
Baserow B.V./Baserowv5
Range: >0.6.0, <1.1.0

Patches

Vulnerability mechanics

References

gitlab.com/bramw/baserow/-/issues/370nvdIssue TrackingPatchThird Party Advisory
baserow.io/blog/march-2021-release-of-baserownvdRelease NotesVendor Advisory
gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22255.jsonnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000