Lack of data validation In commons-fileupload:commons-fileupload
Description
High severity vulnerability that affects commons-fileupload:commons-fileupload The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 1.3.2-1 | ||
 maven | 7.0.70, 8.0.36, 8.5.3, 9.0.0.m8 | ||
maven | 1.3.2 | ||
debian 12 | 1.3.2-1 | ||
debian 13 | 1.3.2-1 | ||
debian 11 | 1.3.2-1 | ||
 rpm rhel7 | 0:7.0.69-10.el7 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12.
References
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. 29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. 49. 50. 51. 52. 53.