CVE

CVE-2020-7699

CVE-2020-7699

This affects the package express-fileupload before 1.1.8.
If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.

Source: CVE-2020-7699

Exit mobile version