← Vulnerability feed

Vulnerability record · CVE-2020-7699 · published 30 July 2020

CVE-2020-7699: Express-fileupload project express-fileupload prototype pollution vulnerability

EExpress Fileupload Project · Express Fileupload

This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.

9.8 CVSS 3.1 Critical EPSS 4.8% · top 8.4% CWE-1321 · Prototype pollution
9.8CVSS 3.1 base score, v2 7.5
4.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/richardgirges/express-fileupload/issues/236 ExploitThird Party Advisory
https://security.netapp.com/advisory/ntap-20200821-0003/ Third Party Advisory
https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969 ExploitThird Party Advisory
https://github.com/richardgirges/express-fileupload/issues/236 ExploitThird Party Advisory
https://security.netapp.com/advisory/ntap-20200821-0003/ Third Party Advisory
https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969 ExploitThird Party Advisory

Track CVE-2020-7699 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.1CVE-2020-11023jQuery DOM manipulation methods XSS via untrusted HTML option elementsjQuery versions 1.0.3 through before 3.5.0 execute untrusted code when HTML containing <option> elements from untrusted sources is passed to DOM mani…KEVEPSS 85%analysed9.8CVE-2022-27140Express-fileupload project express-fileupload unrestricted file upload vulnerabilityAn arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted…EPSS 2.9%9.8CVE-2020-15801Python untrusted search path vulnerabilityIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <execu…EPSS 3.5%9.8CVE-2020-14967Kjur jsrsasign memory buffer overflow vulnerabilityAn issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext m…EPSS 2.3%9.8CVE-2020-14968Kjur jsrsasign memory buffer overflow vulnerabilityAn issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signature manipul…EPSS 2.9%7.5CVE-2022-27261Express-fileupload project express-fileupload unrestricted file upload vulnerabilityAn arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite…EPSS 1.4%7.5CVE-2020-14966Kjur jsrsasign improper verification of cryptographic signature vulnerabilityAn issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signatures by not checking overflows i…EPSS 1.1%6.1CVE-2020-11022jQuery DOM manipulation methods allow XSS even after sanitizationjQuery versions 1.12.0 through 3.4.x execute untrusted code when HTML from untrusted sources is passed to DOM manipulation methods such as .html() an…EPSS 99%analysed

Source: NIST National Vulnerability Database (record CVE-2020-7699), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.