CVE-2024-3153: Express Multer Unhandled Errors
Directly using un-wrapped multer middleware (like `.single()`, `.array()`) in Express routes can lead to unhandled exceptions or promise rejections when parsing malformed multipart/form-data requests. This crashes the server, resulting in a Denial of Service (DoS). To fix this, wrap the multer middleware in a custom error-handling function that catches `err`
JSgreprules fetch cve-2024-3153-express-multer-unhandled-errors --engine opengrepDescription
Directly using un-wrapped multer middleware (like `.single()`, `.array()`) in Express routes can lead to unhandled exceptions or promise rejections when parsing malformed multipart/form-data requests. This crashes the server, resulting in a Denial of Service (DoS). To fix this, wrap the multer middleware in a custom error-handling function that catches `err`
Community feedback
0 signals from signed-in users.
- Useful
- 0
- False positive
- 0
- Metadata
- 0