The vulnerability of the MultipartFile.move() function in the bodyparser package of the AdonisJS web application framework allows a attacker to execute arbitrary code.

The vulnerability of the MultipartFile.move function in the bodyparser package of the AdonisJS web application framework is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending...

Directory Traversal

Overview @adonisjs/bodyparser is a BodyParser middleware for AdonisJS http server to read and parse request body Affected versions of this package are vulnerable to Directory Traversal via the MultipartFile.move function's default options. An attacker can write arbitrary files to unintended...