CVE:CVE-2020-7699
CNNVD:CNNVD-202007-1739
express-fileupload是美国Richard Girges软件开发者的一款文件上传中间件。
express-fileupload 1.1.8之前版本中存在安全漏洞。攻击者可借助特制HTTP请求利用该漏洞导致拒绝服务或执行任意代码。
solution:Upgrade express-fileupload_project express-fileupload to a higher version than 1.1.8,and avoid the version (,1.1.8); Upgrade netapp max_data to a higher version than -