CVE-2022-27261

An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files…

published April 12, 2022

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01381 · 71.9th percentile
Published
2022-04-12T16:29Z
EPSS history
Timeline
  • 12 APR 16:29Z
    An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files…
    cvelistv5