High DSA-2856-1 1 CVE

libcommons-fileupload-java - security update

Published Feb 7, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 6.0	libcommons-fileupload-java	1.2.2-1+deb6u2
Debian · 7	libcommons-fileupload-java	1.2.2-1+deb7u2

Vulnerabilities 1

High 7.5

CVE-2014-0050 Public exploit EPSS 83%

Commons FileUpload Denial of service vulnerability

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a…

org.apache.tomcat:tomcat commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven

Mar 28, 2014