GitHub Advisoryadvisory · Maven

GHSA-fvm3-cfvj-gxqq High severity vulnerability that affects commons-fileupload:commons-fileupload

HIGH Published 2018-12-21 Modified 2021-07-19 Official page ↗
Aliases
CVE-2016-3092
Ecosystem
Maven
Packages
commons-fileupload:commons-fileupload
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2020-06-16

Affected packages

• Maven commons-fileupload:commons-fileupload: < 1.3.2 → fixed in 1.3.2

Description

The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.

Related

Alias · CVE (1)

  • CVE-2016-3092 The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References