> CVE-2025-48997

« BACK_TO_HOME
PUBLISHED
2025-06-03 19:15
MODIFIED
2025-06-04 14:54
EPSS (Prob. Exploit)
0.48%
Top 58.2%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service (DoS) by sending an upload file request with an empty string field name. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to `2.0.1` to receive a patch. No known workarounds are available.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Developer Hub 1.7

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat Developer Hub 1.7.0 release.
Red Hat Developer Hub 1.7.0 has been released.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Multer vulnerable to Denial of Service via unhandled exception

AFFECTED PACKAGES:
Unknown / Unknown
4 versions affected
ALIASES:
GHSA-g5hg-p3ph-g8qg

> HISTORIQUE DES MODIFICATIONS

Première apparition
03/06/2025 19:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:04
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:13
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:13
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME