Login Request a demo
EX
Product
Express-fileupload
by Express-fileupload Project · last CVE Apr 12, 2022
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 1Medium 0Low 0
Severity
All severities3Critical2High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Express-fileupload to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-27140
9.8
3%
Apr 12
An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file
Affected: 1.3.1
CVE-2020-7699
9.8
5%
Jul 30
This affects the package express-fileupload before 1.1.8
Affected: before 1.1.8
CVE-2022-27261
7.5
1%
Apr 12
An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web…
Affected: 1.3.1
Showing 3