13 matches found
multer vulnerable to Denial of Service via oversized array index in field names
Impact multer is vulnerable to a Denial of Service DoS via a crafted array index in multipart field names. The append-field dependency parses bracket notation in field names, and a large numeric index such as items4294967294 forces allocation of a maximum-length sparse array. A following field wi...
7.5CVSS5.8AI score0.00278EPSS
SaveExploits0References7Affected Software1
20