Package · Maven

commons-fileupload:commons-fileupload

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.8

CVE-2013-0248

Incorrect Default Permissions in Apache Commons FileUpload

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven

Mar 15, 2013