Overview
About vulnerability
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.
This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4.
Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.
Details
- Affected product:
- AlmaLinux 9.2 ESU , Apache Commons , Apache Struts , Apache Tapestry , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , Spring , TuxCare 9.6 ESU , cocoon , jackrabbit , lucene , myfaces , solr , tika
- Affected packages:
- commons-fileupload @ 1.3.3 (+648 more)
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.
This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4.
Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.