60
CVE-2014-0050
- CVSS 3.1
- 7.5 high
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
- Products
- retail applications, commons fileupload, tomcat
- Weakness
- CWE-264, CWE-835
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H