CVE-2022-29623: Connect-Multiparty Project Connect-Multiparty

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.

Affected products

Published 2022-05-16. Last modified 2026-06-17.