Lucene search

K
cvelistRedhatCVELIST:CVE-2014-0050
HistoryMar 28, 2014 - 7:00 p.m.

CVE-2014-0050

2014-03-2819:00:00
redhat
raw.githubusercontent.com

6.3 Medium

AI Score

Confidence

Low

0.164 Low

EPSS

Percentile

96.0%

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop’s intended exit conditions.