Unrestricted Upload of File with Dangerous Type in jquery-file-upload

Description

Arbitrary file upload in jQuery Upload File <= 4.0.2

Recommendation

Update the jquery-file-upload package to the latest compatible version. Followings are version details:

• Affected version(s): <= 4.0.2
• Patched version(s): 4.0.5

References

• GHSA-mxr5-p36v-479m
• www.vapidlabs.com
• CVE-2018-9207
• CWE-434
• CAPEC-310
• OWASP 2021-A4
• OWASP 2021-A6

Related Issues

• Unrestricted Upload of File with Dangerous Type in blueimp-file-upload - CVE-2018-9206
• Unrestricted Upload of File with Dangerous Type in ButterCMS - CVE-2022-27260
• Unrestricted Upload of File with Dangerous Type in Payload - CVE-2022-27952
• jQuery-Upload-File XSS in fileNameStr - CVE-2021-37504

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

jquery-file-upload