Search for packages
purl | pkg:maven/commons-fileupload/commons-fileupload@1.3.1 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-2c6h-srga-aaap
Aliases: CVE-2023-24998 GHSA-hfrx-6qgj-fp6c |
Apache Commons FileUpload denial of service vulnerability |
Affected by 0 other vulnerabilities. |
VCID-e8ew-8qyr-aaad
Aliases: CVE-2016-1000031 GHSA-7x9j-7223-rg5m |
High severity vulnerability that affects commons-fileupload:commons-fileupload |
Affected by 1 other vulnerability. |
VCID-qmjs-369r-aaar
Aliases: CVE-2016-3092 GHSA-fvm3-cfvj-gxqq |
High severity vulnerability that affects commons-fileupload:commons-fileupload |
Affected by 2 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-qcms-zybq-aaap | High severity vulnerability that affects commons-fileupload:commons-fileupload |
CVE-2014-0050
GHSA-xx68-jfcg-xmmf |
VCID-yqy8-6qrt-aaaa | Arbitrary file upload via deserialization The DiskFileItem class in this package allows remote attackers to write to arbitrary files via a `NULL` byte in a file name in a serialized instance. |
CVE-2013-2186
GHSA-qx6h-9567-5fqw |