En resumen
- CVE-2020-7699 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a express-fileupload (express-fileupload project), express-fileupload.
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.8%, mayor que el 91.9% de las vulnerabilidades.
- Solución: actualizar a 1.1.8, 1.1.9 o posterior.
Description
This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.
NVD description
This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.
Más vulnerabilidades de express-fileupload
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free