Lack of data validation In commons-fileupload:commons-fileupload
Description
Commons FileUpload Denial of service vulnerability MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 maven | 8.0.3, 7.0.52 | ||
 debian 14 | 1.3.1-1 | ||
debian 11 | 1.3.1-1 | ||
debian 12 | 1.3.1-1 | ||
debian 13 | 1.3.1-1 | ||
maven | 1.3.1 | ||
maven | 7.0.52, 8.0.3 | ||
 rpm rhel6 | 0:6.0.24-64.el6_5 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9.
References
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. 29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. 49. 50. 51. 52. 53. 54. 55. 56. 57. 58. 59. 60. 61. 62. 63. 64.