GitHub Advisoryadvisory · Maven

GHSA-7x9j-7223-rg5m Improper Access Control in commons-fileupload

CRITICAL Published 2018-12-21 Modified 2022-09-14 Official page ↗
Aliases
CVE-2016-1000031
Ecosystem
Maven
Packages
commons-fileupload:commons-fileupload
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284
Reviewed
2020-06-16

Affected packages

• Maven commons-fileupload:commons-fileupload: < 1.3.3 → fixed in 1.3.3

Description

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

Related

Alias · CVE (1)

  • CVE-2016-1000031 Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References