Description
Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.
Remediation
References
https://hackerone.com/reports/343726
Related Vulnerabilities
CVE-2020-13942 Vulnerability in maven package org.apache.unomi:unomi-services
CVE-2020-17519 Vulnerability in maven package org.apache.flink:flink-runtime_2.12
CVE-2023-6886 Vulnerability in maven package com.xnx3.wangmarket:wangmarket
CVE-2017-16169 Vulnerability in npm package looppake
CVE-2018-1999002 Vulnerability in maven package org.jenkins-ci.main:jenkins-core