NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2016-1000031

CVSS 3.1: 9.8 critical
EPSS: 34%p98
Published: Oct 25, 2016 · Oct 25, 2016
Modified: Oct 7, 2026

Analyze CVE-2016-1000031 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

Vendors: apache

Products: commons fileupload

Weakness: CWE-284

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (33.7%)

In the news

4 stories

Apache Struts 2.3.x vulnerable to two year old RCE flaw

Help Net SecurityDec 15, 12:31 UTC · Dec 15, 2023VulnerabilityCVE-2016-10000312 · 1 read

60

Oracle critical patch advisory addresses 284 flaws, 33 critical

Security AffairsJan 18, 13:15 UTC · Jan 18, 2019VulnerabilityCVE-2016-1000031 CVE-2017-5645 CVE-2018-11776+32 · 1 read

60

Apache alerts developers of remote code execution flaw

CyberScoopNov 7, 15:41 UTC · Nov 7, 2018VulnerabilityCVE-2016-10000314 · 1 read

60

Apache Struts users have to update FileUpload library to fix years

Security AffairsNov 7, 07:28 UTC · Nov 7, 2018VulnerabilityCVE-2016-1000031 CVE-2014-00502 · 1 read

60