Skip to content
OpenAdvisories

Package · npm

angular-base64-upload

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8
    CVE-2024-42640 Public exploit EPSS 40%

    angular-base64-upload vulnerable to unauthenticated remote code execution

    angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uplo…