Connect Multiparty

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29623 npm HIGH POC This Week

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE File Upload Connect Multiparty

NVD GitHub

CVSS 3.1

7.8

EPSS

1.3%

CVE-2022-29623 npm

EPSS 1% CVSS 7.8

HIGH POC This Week

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE File Upload Connect Multiparty

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy