Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/commons-fileupload/commons-fileupload@1.0
purl pkg:maven/commons-fileupload/commons-fileupload@1.0
Tags Ghost
Next non-vulnerable version 1.6.0
Latest non-vulnerable version 1.6.0
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2013-0248

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which …
1.3
Vulnerable
1.3.1
Vulnerable
1.3.2
Vulnerable
GHSA-vv7r-c36w-3prj
Aliases:
CVE-2025-48976
Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers Allocation of resources for multipart headers with insufficient limits …
1.6.0
Not vulnerable
GHSA-vm69-474v-7q2w
Aliases:
CVE-2013-0248
Incorrect Default Permissions in Apache Commons FileUpload The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses …
1.2.2
Vulnerable
This package is not known to fix any advisories.