CVEvulnerability

CVE-2013-2186

7.5 HIGH Published 2013-10-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.

Affected configurations

• redhat jboss enterprise brms platform 5.3.1 • redhat jboss enterprise portal platform 4.3.0 • redhat jboss enterprise portal platform 5.2.2 • redhat jboss enterprise portal platform 6.0.0 • redhat jboss enterprise web server 1.0.2 • redhat openshift (<= 3.1) • ubuntu ubuntu 10.04

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References