Security Advisory

CVE-2022-27261

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-12 16:29:01
Last updated 2024-08-03 05:25:32
Assigner mitre
State PUBLISHED

Description

An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.