Search for packages
| purl | pkg:maven/commons-fileupload/commons-fileupload@1.3.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-vv7r-c36w-3prj
Aliases: CVE-2025-48976 |
Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers Allocation of resources for multipart headers with insufficient limits … |
Not vulnerable |
|
GHSA-hfrx-6qgj-fp6c
Aliases: CVE-2023-24998 |
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts … |
Vulnerable Vulnerable |
|
GHSA-7x9j-7223-rg5m
Aliases: CVE-2016-1000031 |
Improper Access Control in commons-fileupload Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution |
Vulnerable Vulnerable |
|
CVE-2023-24998
Aliases: GHSA-hfrx-6qgj-fp6c |
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2013-0248
|
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which … | |
|
CVE-2016-3092
|
Denial of Service The MultipartStream class in this package allows remote attackers to cause a denial of service (CPU consumption) … | |
|
GHSA-fvm3-cfvj-gxqq
|
High severity vulnerability that affects commons-fileupload:commons-fileupload The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat … |
CVE-2016-3092
|