critical9.8
CVE-2022-29353
An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename.
Impact
An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Graphql-Upload Project | Graphql-Upload | Version 13.0.0 |