CF
Product
Commons Fileupload
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 1Low 0
Watch
Add Commons Fileupload to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1000031 | 9.8 | Oct 25 | Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution Affected: through 1.3.2 |
| CVE-2025-48976 | 7.5 | Jun 16 | Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload Affected: 1.0 before 1.6; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +1 more |
| CVE-2023-24998 | 7.5 | Feb 20 | Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts Affected: 1.0 before 1.5; 1.0 |
| CVE-2016-3092 | 7.5 | Jul 4 | The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and… Affected: through 1.3.1 |
| CVE-2014-0050 | 7.5 | Mar 28 | MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service… Affected: through 1.3; 1.0; 1.1; 1.1.1; 1.2; 1.2.1; +1 more |
| CVE-2013-0248 | 6.8 | Mar 15 | The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to… Affected: 1.0; 1.1; 1.1.1; 1.2; 1.2.1; 1.2.2 |
Showing 6