Lucene search
Veracode Vulnerability DatabaseVERACODE:35076HistoryApr 13, 2022 - 8:11 a.m.
Arbitrary File Upload
2022-04-1308:11:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25
0.007 Low
EPSS
Percentile
80.4%
express-fileupload is vulnerable to arbitrary file upload. It does not restrict an attacker from uploading a malicious PHP file to execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| express-fileupload | eq | 1.3.1 | |
| express-fileupload | eq | 1.3.1 |
References
Related
nvd
nvd
CVE-2022-27140
2022-04-12 17:15:09
prion
prion
Design/Logic Flaw
2022-04-12 17:15:00
cvelist
cvelist
CVE-2022-27140
2022-04-12 00:00:00
cve
cve
CVE-2022-27140
2022-04-12 17:15:09
ibm
ibm