CVE-2016-1000031

—

CVSS 3.0

9.8 critical

EPSS

34%p98

Published

Oct 25, 2016 (Oct 25, 2016)

Modified

Jun 17, 2026

Description

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

Vendors: apache
Products: commons fileupload
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (33.7%)

In the news4 stories

Apache Struts 2.3.x vulnerable to two year old RCE flaw

Help Net SecurityDec 15, 12:31 UTC · Dec 15, 2023Vulnerability CVE-2016-1000031

60

Oracle critical patch advisory addresses 284 flaws, 33 critical

Security AffairsJan 18, 13:15 UTC · Jan 18, 2019Vulnerability CVE-2016-1000031 CVE-2017-5645 CVE-2018-11776+3 CVEs

60

Apache alerts developers of remote code execution flaw

CyberScoopNov 7, 15:41 UTC · Nov 7, 2018Vulnerability CVE-2016-1000031

60

Apache Struts users have to update FileUpload library to fix years

Security AffairsNov 7, 07:28 UTC · Nov 7, 2018Vulnerability CVE-2016-1000031 CVE-2014-0050

60