npm angular-base64-upload vulnerabilities

Latest npm angular-base64-upload CVEs

Newest publication first

1. CVE-2024-42640 angular-base64-upload vulnerable to unauthenticated remote code execution

   Published 2024-10-11

   Critical·CVSS 9.8 EPSS 40.2% Public exploit PoC

   angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.