Search for packages
| purl | pkg:maven/commons-fileupload/commons-fileupload@1.2.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2013-0248
|
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-vv7r-c36w-3prj
Aliases: CVE-2025-48976 |
Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers Allocation of resources for multipart headers with insufficient limits … |
Not vulnerable |
|
GHSA-qx6h-9567-5fqw
Aliases: CVE-2013-2186 |
Arbitrary file write in Apache Commons Fileupload The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss … |
Vulnerable |
|
GHSA-vm69-474v-7q2w
Aliases: CVE-2013-0248 |
Incorrect Default Permissions in Apache Commons FileUpload The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses … |
Vulnerable |
|
CVE-2013-0248
|
/tmp directory used by default for uploaded files The default configuration of `javax.servlet.context.tempdir` in this package uses the `/tmp` directory … |
Vulnerable |
|
CVE-2013-2186
|
Arbitrary file upload via deserialization The DiskFileItem class in this package allows remote attackers to write to arbitrary files via … |
Vulnerable |
|
GHSA-hfrx-6qgj-fp6c
Aliases: CVE-2023-24998 |
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts … |
Vulnerable Vulnerable |
|
GHSA-7x9j-7223-rg5m
Aliases: CVE-2016-1000031 |
Improper Access Control in commons-fileupload Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution |
Vulnerable Vulnerable |
|
GHSA-fvm3-cfvj-gxqq
Aliases: CVE-2016-3092 |
High severity vulnerability that affects commons-fileupload:commons-fileupload The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat … |
Vulnerable Vulnerable |
|
CVE-2023-24998
Aliases: GHSA-hfrx-6qgj-fp6c |
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts … |
Vulnerable |
|
GHSA-xx68-jfcg-xmmf
Aliases: CVE-2014-0050 |
Commons FileUpload Denial of service vulnerability MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, … |
Vulnerable Vulnerable |