Approved changes feed: RSS · Atom

cpe:2.3:a:apache:commons_fileupload:1.0:beta:*:*:*:*:*:*

part: a version: 1.0 update: beta

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCommons Fileupload (dad595f3-b9a3-5f56-975d-d667875367b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/commons purl2cpe 2026-06-01 10:14:27.999269
pkg:deb/debian/libcommons-fileupload-java purl2cpe 2026-06-01 10:14:27.999270
pkg:deb/ubuntu/libcommons-fileupload-java purl2cpe 2026-06-01 10:14:27.999272
pkg:github/apache/commons-fileupload purl2cpe 2026-06-01 10:14:27.999273
pkg:rpm/fedora/apache-commons-fileupload purl2cpe 2026-06-01 10:14:27.999274
pkg:rpm/opensuse/apache-commons-fileupload purl2cpe 2026-06-01 10:14:27.999276

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-24998 vulnerable 2026-06-08 05:56:08.305956 Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.
Published: 2023-02-20T15:57:07.372Z
Updated: 2025-11-03T21:47:24.224Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.