Improper Access Control in commons-fileupload

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-1000031 · ADVISORY
• tenable.com/security/research/tra-2016-30 · WEB
• tenable.com/security/research/tra-2016-23 · WEB
• tenable.com/security/research/tra-2016-12 · WEB
• oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html · WEB
• oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html · WEB
• oracle.com/technetwork/security-advisory/cpujul2019-5072835.html · WEB
• oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · WEB
• oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html · WEB
• oracle.com/security-alerts/cpuoct2021.html · WEB
• oracle.com/security-alerts/cpuoct2020.html

Autres vulnérabilités de commons-fileupload:commons-fileupload

• CVE-2025-48976ÉLEVÉE 7.5Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue…
• CVE-2023-24998ÉLEVÉE 7.5Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker …
• CVE-2016-3092ÉLEVÉE 7.5The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x be…
• CVE-2014-0050ÉLEVÉE 7.5MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attac…
• CVE-2013-2186ÉLEVÉE 7.5The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red H…