Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2013-0248
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
| Software | From | Fixed in |
|---|---|---|
| apache / commons_fileupload | 1.2.2 | 1.2.2.x |
| apache / commons_fileupload | 1.2 | 1.2.x |
| apache / commons_fileupload | 1.1 | 1.1.x |
| apache / commons_fileupload | 1.1.1 | 1.1.1.x |
| apache / commons_fileupload | 1.2.1 | 1.2.1.x |
| apache / commons_fileupload | 1.0 | 1.0.x |
commons-fileupload / commons-fileupload
|
1.0 | 1.2.2 |