Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-0248HistoryMar 15, 2013 - 8:55 p.m.
CVE-2013-0248
2013-03-1520:55:00
Debian Security Bug Tracker
security-tracker.debian.org
13
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
Related
ibm
ibm
securityvulns
securityvulns
ubuntucve
ubuntucve
CVE-2013-0248
2013-03-15 00:00:00
prion
prion
Default configuration
2013-03-15 20:55:00
cve
cve
CVE-2013-0248
2013-03-15 20:55:00
github
github
Incorrect Default Permissions in Apache Commons FileUpload
2022-05-05 02:48:41
seebug
seebug
Apache Commons FileUploadไธๅฎๅ
จไธดๆถๆไปถๅๅปบๆผๆด(CVE-2013-0248)
2013-03-10 00:00:00
osv
osv
Incorrect Default Permissions in Apache Commons FileUpload
2022-05-05 02:48:41
nessus
nessus
GLSA-202107-39 : Apache Commons FileUpload: Multiple vulnerabilities
2022-01-24 00:00:00
gentoo
gentoo
Apache Commons FileUpload: Multiple vulnerabilities
2021-07-17 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Related for DEBIANCVE:CVE-2013-0248