[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjMW_tN9fbHCRf9tS7tn_lQf3TFvukeIjPShiAbHFAsI":3,"g5a-ex:apache\u002Fcommons_fileupload@*":118,"g5a-family:apache\u002Fcommons_fileupload":120},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":61,"kevVulnerabilities":95,"seoMetadata":96,"meta":115},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"apache","commons_fileupload",14,5,0,"2023-02-20",[14,18,21,23,25,27,29,31,33,35,37,39,41,43],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",3,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.1",2,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"1.1.1",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"1.2",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"1.2.1",{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},"1.2.2",{"version":30,"cve_count":11,"kev_count":11,"has_kev":17},"1.3",{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},"1.3.1",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"1.3.2",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"1.3.3",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"1.4",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"1.5",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"1.6",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"2.0.0","Commons Fileupload by Apache is a technology product with 14 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57,58,59,60],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},{"version":30,"cve_count":11,"kev_count":11,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},[62,70,75,81,88],{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":68,"isKev":17,"epssScore":69},"CVE-2014-0050","MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.","2014-04-01",7.5,"v2","High",0.83334,{"cveId":71,"description":72,"publishedDate":12,"cvssScore":66,"cvssVersion":73,"severity":68,"isKev":17,"epssScore":74},"CVE-2023-24998","Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\n\n\n\n\nNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured.","v3.1",0.48788,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":66,"cvssVersion":79,"severity":68,"isKev":17,"epssScore":80},"CVE-2016-3092","The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.","2016-07-04","v3.0",0.37171,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":79,"severity":86,"isKev":17,"epssScore":87},"CVE-2016-1000031","Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution","2016-10-25",9.8,"Critical",0.33686,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":73,"severity":93,"isKev":17,"epssScore":94},"CVE-2013-0248","The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the \u002Ftmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.","2013-03-15",6.8,"Medium",0.00788,[],{"title":97,"metaDescription":98,"keywords":99,"structuredData":100},"Commons Fileupload by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Commons Fileupload by Apache covering 14 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Commons Fileupload vulnerabilities, Commons Fileupload security, Commons Fileupload CVE, Apache Commons Fileupload, Commons Fileupload threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":101,"@type":102,"name":103,"description":98,"url":104,"manufacturer":105,"applicationCategory":109,"softwareVersion":110,"mainEntity":111},"https:\u002F\u002Fschema.org","SoftwareApplication","Commons Fileupload","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fcommons_fileupload",{"@type":106,"name":107,"url":108},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","14 versions tracked",{"@type":112,"name":113,"description":114,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Commons Fileupload Security Vulnerabilities","Security vulnerabilities affecting Commons Fileupload by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":116,"apiVersion":117},"2026-10-17T21:16:25.459Z","3.0",{"rows":119,"total":11,"capped":17,"failed":11},[],[]]