An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| express-fileupload(npm) | 0 | N/A | N/A |
CVSS Metrics