File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/aydinnyunus/801342361584d1491c67a820a714f53f | Exploit Mitigation Third Party Advisory |
| https://github.com/nestjs/nest/issues/13311#issuecomment-1993839495 | Exploit Issue Tracking |
Configurations
History
03 Apr 2025, 15:30
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nestjs nest
Nestjs |
|
| CPE | cpe:2.3:a:nestjs:nest:10.3.2:*:*:*:*:node.js:*:* | |
| References | () https://github.com/nestjs/nest/issues/13311#issuecomment-1993839495 - Exploit, Issue Tracking | |
| References | () https://gist.github.com/aydinnyunus/801342361584d1491c67a820a714f53f - Exploit, Mitigation, Third Party Advisory |
14 Mar 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-14 18:15
Updated : 2025-04-03 15:30
NVD link : CVE-2024-29409
Mitre link : CVE-2024-29409
JSON object : View
Products Affected
nestjs
- nest
CWE
No CWE.