Vendors / Connect-multiparty Project Connect-multiparty Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Connect-multiparty Project records in CISA KEV No Connect-multiparty Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01384 · Published 2022-05-16 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
Critical0 High1 Medium0 Low0 No CVSS0