express-fileupload is a file upload middleware for express that wraps around busboy.
Affected versions of this package are vulnerable to Arbitrary File Upload that allows attackers to execute arbitrary code when uploading a crafted PHP file.
NOTE: The maintainers of this package dispute its validity on the grounds that the attack vector described is the normal usage of the package.
express-fileupload is a file upload middleware for express that wraps around busboy.
Affected versions of this package are vulnerable to Arbitrary File Upload when it is possible for attackers to upload multiple files with the same name, causing an overwrite of files in the web application server.