GitHub Advisoryadvisory · npm

GHSA-mxr5-p36v-479m Unrestricted Upload of File with Dangerous Type in jquery-file-upload

CRITICAL Published 2018-12-19 Modified 2022-09-14 Official page ↗

Aliases: CVE-2018-9207
Ecosystem: npm
Packages: jquery-file-upload
Severity: Critical
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-434
Reviewed: 2020-06-16

Affected packages

• npm jquery-file-upload: < 4.0.5 → fixed in 4.0.5

Description

Arbitrary file upload in jQuery Upload File <= 4.0.2

Related

Alias · CVE (1)

CVE-2018-9207 Arbitrary file upload in jQuery Upload File <= 4.0.2 vulnerability

Weakness · CWE (1)

CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References