Search for packages
purl | pkg:maven/commons-fileupload/commons-fileupload@1.2.2 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-2c6h-srga-aaap
Aliases: CVE-2023-24998 GHSA-hfrx-6qgj-fp6c |
Apache Commons FileUpload denial of service vulnerability |
Affected by 0 other vulnerabilities. |
VCID-e8ew-8qyr-aaad
Aliases: CVE-2016-1000031 GHSA-7x9j-7223-rg5m |
High severity vulnerability that affects commons-fileupload:commons-fileupload |
Affected by 1 other vulnerability. |
VCID-hysp-vpze-aaaa
Aliases: CVE-2013-0248 GHSA-vm69-474v-7q2w |
/tmp directory used by default for uploaded files The default configuration of `javax.servlet.context.tempdir` in this package uses the `/tmp` directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack. |
Affected by 5 other vulnerabilities. |
VCID-qcms-zybq-aaap
Aliases: CVE-2014-0050 GHSA-xx68-jfcg-xmmf |
High severity vulnerability that affects commons-fileupload:commons-fileupload |
Affected by 3 other vulnerabilities. |
VCID-qmjs-369r-aaar
Aliases: CVE-2016-3092 GHSA-fvm3-cfvj-gxqq |
High severity vulnerability that affects commons-fileupload:commons-fileupload |
Affected by 2 other vulnerabilities. |
VCID-yqy8-6qrt-aaaa
Aliases: CVE-2013-2186 GHSA-qx6h-9567-5fqw |
Arbitrary file upload via deserialization The DiskFileItem class in this package allows remote attackers to write to arbitrary files via a `NULL` byte in a file name in a serialized instance. |
Affected by 3 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-hysp-vpze-aaaa | /tmp directory used by default for uploaded files The default configuration of `javax.servlet.context.tempdir` in this package uses the `/tmp` directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack. |
CVE-2013-0248
GHSA-vm69-474v-7q2w |