Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/commons-fileupload/commons-fileupload@1.3.3
purl pkg:maven/commons-fileupload/commons-fileupload@1.3.3
Next non-vulnerable version 1.6.0
Latest non-vulnerable version 1.6.0
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-vv7r-c36w-3prj
Aliases:
CVE-2025-48976
Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers Allocation of resources for multipart headers with insufficient limits …
1.6.0
Not vulnerable
GHSA-hfrx-6qgj-fp6c
Aliases:
CVE-2023-24998
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts …
1.5
Vulnerable
1.5
Vulnerable
CVE-2023-24998
Aliases:
GHSA-hfrx-6qgj-fp6c
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts …
1.5
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-7x9j-7223-rg5m
Improper Access Control in commons-fileupload Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution CVE-2016-1000031