CVE-2024-29409

5.5

MEDIUMCVSS v3

Published

March 14, 2025

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header.

nestjs/nest

GitHubA progressive Node.js framework for building efficient, scalable, and enterprise-grade server-side applications with TypeScript/JavaScript 🚀

= 10.3.2NVD

nest

Python Package IndexNeST: Network Stack Tester

= 10.3.2NVD

NEST

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Strongly typed interface to Elasticsearch. Fluent and classic object initializer mappings of requests and responses. Uses and exposes Elasticsearch.Net.

= 10.3.2NVD

nest

Crates.ioUse your filesystem as a nested data store

= 10.3.2NVD

nest

NPMA Node HTTP client aimed at REST API's.

= 10.3.2NVD

ahdinosaur/nest

GitHub:bird: Use your filesystem as a nested data store!

= 10.3.2NVD

nest

RubyGemsIt is a design pattern in key-value databases to use the key to simulate structure, and Nest can take care of that.

= 10.3.2NVD

soveran/nest

GitHubGenerate nested namespaced keys for key-value databases.

= 10.3.2NVD

Security Advisories

CVE-2024-29409

Description

More on this CVE