libcommons-fileupload-java

4 results · Feed

• High 7.5
  CVE-2025-48976 Public exploit EPSS 33%

  Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

  Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade…

  Apache Software Foundation Apache Commons FileUpload tomcat9 tomcat9 Debian Ubuntu Maven
  Jun 16, 2025
• High 7.5
  CVE-2023-24998 Public exploit EPSS 49%

  Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

  Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…

  Apache Software Foundation Apache Tomcat Apache Commons FileUpload tomcat9 Debian Ubuntu Maven
  Feb 20, 2023
• Critical 9.8
  CVE-2016-1000031 EPSS 33%

  Improper Access Control in commons-fileupload

  Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

  tomcat8 tomcat7 tomcat6 commons-fileupload:commons-fileupload Debian Ubuntu Maven
  Oct 25, 2016
• High 7.5
  CVE-2016-3092 EPSS 37%

  High severity vulnerability that affects commons-fileupload:commons-fileupload

  The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consu…

  tomcat8 tomcat7 tomcat6 commons-fileupload:commons-fileupload Debian Ubuntu Maven
  Jul 4, 2016