CVE-2024-29409: File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.

PriorityP433medium5.5CVSS 3.1

AVNACLPRLUIRSUCLILAL

EPSS

0.30%

21.5th percentile

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
nestjs	common	>= 0 < 10.4.16	10.4.16
nestjs	common	>= 11.0.0-next.1 < 11.0.16	11.0.16
nestjs	nest	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.