Description
Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.
Remediation
References
https://hackerone.com/reports/343726
Related Vulnerabilities
CVE-2023-4043 Vulnerability in maven package org.eclipse.parsson:parsson
CVE-2021-46037 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2019-7722 Vulnerability in maven package net.sourceforge.pmd:pmd-core
CVE-2019-10744 Vulnerability in npm package lodash
CVE-2021-32827 Vulnerability in maven package org.mock-server:mockserver-core