GoogleOSV:GHSA-HFRX-6QGJ-FP6CApache Commons FileUpload denial of service vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.034 Low
EPSS
Percentile
91.4%
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.
References
www.openwall.com/lists/oss-security/2023/05/22/1
commons.apache.org/proper/commons-fileupload/security-reports.html
github.com/apache/commons-fileupload
github.com/apache/commons-fileupload/commit/e20c04990f7420ca917e96a84cec58b13a1b3d17
github.com/apache/tomcat/commit/8a2285f13affa961cc65595aad999db5efae45ce
github.com/apache/tomcat/commit/9ca96c8c1eba86c0aaa2e6be581ba2a7d4d4ae6e
github.com/apache/tomcat/commit/cf77cc545de0488fb89e24294151504a7432df74
github.com/apache/tomcat/commit/d53d8e7f77042cc32a3b98f589496a1ef5088e38
github.com/search?q=repo%3Aapache%2Ftomcat+util.http+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code
lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy
lists.debian.org/debian-lts-announce/2023/10/msg00020.html
nvd.nist.gov/vuln/detail/CVE-2023-24998
security.gentoo.org/glsa/202305-37
tomcat.apache.org/security-10.html
tomcat.apache.org/security-11.html
tomcat.apache.org/security-8.html
tomcat.apache.org/security-9.html
www.debian.org/security/2023/dsa-5522
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.034 Low
EPSS
Percentile
91.4%