Connect-multiparty Project vulnerabilities
We track 1 vulnerability in Connect-multiparty Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2022.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Connect-multiparty Project vulnerabilities
- 7.8 High severity
Connect-multiparty: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.