Description

Arbitrary file upload in jQuery Upload File <= 4.0.2

Remediation

References

http://www.vapidlabs.com/advisory.php?v=206

Related Vulnerabilities

CVE-2021-23568 Vulnerability in npm package extend2

CVE-2021-21331 Vulnerability in maven package com.datadoghq:datadog-api-client

CVE-2020-36181 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2022-4565 Vulnerability in maven package cn.hutool:hutool-core

CVE-2020-7683 Vulnerability in npm package rollup-plugin-server

Severity

Critical

Classification

CWE-434 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory