Vulnerabilitycritical

Apache Struts users have to update FileUpload library to fix years

Security Affairsby @securityaffairsNov 7, 2018 · 07:28 UTC (Nov 7, 2018)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2016-1000031 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2016-1000031 CVE-2014-0050

Tags: cve-2016-1000031 cve-2014-0050 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-0050	MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a…	7.5	—	PoC	Apr 1, 2014
CVE-2016-1000031	Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution	9.8	34%		Oct 25, 2016

From the original article

2 min read at securityaffairs.com

Apache Struts Users have to update the Commons FileUpload library in Struts 2 that is affected by two vulnerabilities. Apache Struts developers have addressed two vulnerabilities in the Commons FileUpload library in Struts 2, the flaws can be exploited for remote code execution and denial-of-service (DoS) attacks. “Apache today released an advisory, urging users who run Apache Struts 2.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.