Search for vulnerabilities
| Vulnerability ID | VCID-gb8p-hr5j-yqav |
| Aliases |
CVE-2014-0050
GHSA-xx68-jfcg-xmmf |
| Summary | |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 8.0 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| Data source | Metasploit |
|---|---|
| Description | This module triggers an infinite loop in Apache Commons FileUpload 1.0 through 1.3 via a specially crafted Content-Type header. Apache Tomcat 7 and Apache Tomcat 8 use a copy of FileUpload to handle mime-multipart requests, therefore, Apache Tomcat 7.0.0 through 7.0.50 and 8.0.0-RC1 through 8.0.1 are affected by this issue. Tomcat 6 also uses Commons FileUpload as part of the Manager application. |
| Note | Stability: - crash-service-down SideEffects: [] Reliability: [] |
| Ransomware campaign use | Unknown |
| Source publication date | Feb. 6, 2014 |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/http/apache_commons_fileupload_dos.rb |
| Data source | Exploit-DB |
|---|---|
| Date added | Feb. 12, 2014 |
| Description | Apache Commons FileUpload and Apache Tomcat - Denial of Service |
| Ransomware campaign use | Known |
| Source publication date | Feb. 12, 2014 |
| Exploit type | dos |
| Platform | multiple |
| Source update date | Feb. 12, 2014 |
| Percentile | 0.99741 |
| EPSS Score | 0.92678 |
| Published At | Aug. 17, 2025, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2025-07-31T07:58:42.308417+00:00 | ProjectKB MSRImporter | Import | https://raw.githubusercontent.com/SAP/project-kb/master/MSR2019/dataset/vulas_db_msr2019_release.csv | 37.0.0 |