Описание
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.3-2 |
| hardy | ignored | end of life |
| lucid | ignored | |
| oneiric | ignored | end of life |
| precise | ignored | |
| quantal | ignored | |
| raring | ignored | |
| saucy | not-affected | 1.3-2 |
| upstream | released | 1.3 |
Показывать по
EPSS
3.3 Low
CVSS2
6.8 Medium
CVSS3
Связанные уязвимости
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
The default configuration of javax.servlet.context.tempdir in Apache C ...
Incorrect Default Permissions in Apache Commons FileUpload
ALT-PU-2014-3192: package `apache-commons-fileupload` update to version 1.3-alt1_4jpp7
EPSS
3.3 Low
CVSS2
6.8 Medium
CVSS3