7.5

CVE-2025-48976

Medienbericht

Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.

This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4.

Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Commons Fileupload Version >= 1.0 < 1.6
Apache ≫ Commons Fileupload Version2.0.0 Updatem1
Apache ≫ Commons Fileupload Version2.0.0 Updatem1-rc1
Apache ≫ Commons Fileupload Version2.0.0 Updatem2
Apache ≫ Commons Fileupload Version2.0.0 Updatem2-rc1
Apache ≫ Commons Fileupload Version2.0.0 Updatem3
Apache ≫ Commons Fileupload Version2.0.0 Updatem3-rc1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 64.72% 0.991
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
20.04.2026 09:56
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
09.12.2025 09:15
https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12
Vendor Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2025/06/16/4
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html