TI-2020-06219 CVE-2020-7699 · GHSA-9wcg-jrwf-8gg7
Prototype pollution in express-fileupload
Priority MEDIUM 50
This affects the package express-fileupload before 1.1.8.
Express-fileupload Project
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Express-fileupload Project records in CISA KEVNo Express-fileupload Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Express-fileupload · all components
TI-2022-10278 CVE-2022-27140 · GHSA-4fvq-q2rx-hw88
An arbitrary file upload vulnerability in the file upload module of express-fileupload…
Priority MEDIUM 47
An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file.
TI-2022-10376 CVE-2022-27261 · GHSA-w4m6-x6c2-j5c9
An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to…
Priority LOW 36
An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.