CVE-2022-29623

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted…

published May 16, 2022

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01384 · 72.0th percentile
Published
2022-05-16T13:28Z
EPSS history
Timeline
  • 16 MAY 13:28Z
    An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted…
    cvelistv5