Apache Commons Fileupload (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-06-16. Vendor: Apache Software Foundation.

CVEs of Apache Commons Fileupload

• CVE-2025-48976 - CVSS 7.5 (high), 2025-06-16: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache…
• CVE-2023-24998 - CVSS 7.5 (high), 2023-02-20: Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS…