Express-fileupload Project vulnerabilities
We track 2 vulnerabilities in Express-fileupload Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 12, 2022.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Express-fileupload Project vulnerabilities
- 7.5 High severity
Express-fileupload: Unrestricted Upload of File with Dangerous Type
An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.
- 9.8 Critical severity
Express-fileupload: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file. NOTE: the vendor's position is that the observed behavior can only occur with "intentional misusing