apache commons fileupload 1.2.2 vulnerabilities and exploits

(subscribe to this query)

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 up to and including 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

Apache Commons Fileupload 1.2.2 Apache Commons Fileupload 1.2 Apache Commons Fileupload 1.1 Apache Commons Fileupload 1.1.1 Apache Commons Fileupload 1.2.1 Apache Commons Fileupload 1.0

2 Github repositories

MultipartStream.java in Apache Commons FileUpload prior to 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote malicious users to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's ...

1 EDB exploit3 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook