← Database

CVE-2022-29623

HIGH CVSS: 7.8 Published: 2022-05-16 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.

Affected Platforms

Connect-Multiparty Project Connect-Multiparty

Weakness Type

CWE-434

References