En resumen
- CVE-2024-29409 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a nest (nestjs), @nestjs/common.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.34%, mayor que el 26.9% de las vulnerabilidades.
- Solución: actualizar a 11.0.16, 10.4.16 o posterior.
| Package | Affected versions | Patched versions |
|---|
| nest | = 10.3.2
| No fix yet |
| @nestjs/common npm | ≥ 11.0.0-next.1, < 11.0.16< 10.4.16
| 11.0.1610.4.16
|
Description
File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.
NVD description
File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free