apache commons fileupload vulnerabilities and exploits

(subscribe to this query)

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 up to and including 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

Apache Commons Fileupload 1.0 Apache Commons Fileupload 1.1 Apache Commons Fileupload 1.1.1 Apache Commons Fileupload 1.2 Apache Commons Fileupload 1.2.1 Apache Commons Fileupload 1.2.2

1 Github repository

Apache Commons FileUpload prior to 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option...

Apache Commons Fileupload Apache Commons Fileupload 1.0 Debian Debian Linux 9.0 Debian Debian Linux 11.0

MultipartStream.java in Apache Commons FileUpload prior to 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote malicious users to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's ...

Oracle Retail Applications 12.0 Oracle Retail Applications 12.0in Oracle Retail Applications 13.0 Oracle Retail Applications 13.1 Oracle Retail Applications 13.2 Oracle Retail Applications 13.3 Oracle Retail Applications 13.4 Oracle Retail Applications 14.0 Apache Commons Fileupload Apache Commons Fileupload 1.0 Apache Commons Fileupload 1.1 Apache Commons Fileupload 1.1.1

1 EDB exploit2 Github repositories

The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the request parameter "serviceC...

1 Github repository

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 up to and including 9.0.80 and 8.5.85 up to and including 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of servic...

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 up to and including 11.0.0-M10, from 10.1.0-M1 up to and including 10.0.12, from 9.0.0-M1 up to and including ...

Apache Tomcat Apache Tomcat 11.0.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that inv...

Apache Tomcat Apache Tomcat 8.5.83 Apache Tomcat 10.1.0 Apache Tomcat 10.1.1

When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not includ...

Apache Tomcat Apache Tomcat 11.0.0

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 up to and including 11.0.0-M11, from 10.1.0-M1 up to and including 10.1.13, from 9.0.0-M1 up to and including 9.0.81 and from 8.5.0 up to and including 8.5.93 did not correctly parse HTTP trailer heade...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.1.0 Apache Tomcat 11.0.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 up to and including 11.0.0-M11, from 10.1.0-M1 up to and including 10.1.13, from 9.0.0-M1 up to and including 9.0.80 and from 8.5.0 up to and including 8.5.93...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.1.0 Apache Tomcat 11.0.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook