EUVD-2022-5378

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Default configuration of Apache Commons FileUpload allows local users to overwrite files via symlink attack

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Multiple CVEs affect IBM Integration Designer	1 Feb 202319:40	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Commons FileUpload vulnerability affects IBM Tivoli Business Service Manager (CVE-2013-0248)	1 Dec 202111:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance - Identity Manager has multiple vulnerabilities	22 Apr 202406:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Healthcare is affected by multiple Apache vulnerabilities	14 Jun 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Commons Fileupload affects IBM Tivoli Business Service Manager (CVE-2013-2186, CVE-2013-0248, CVE-2016-3092, CVE-2014-0050, 220723)	26 Sep 202205:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities	19 Aug 201920:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SDN VE (CVE- 2011-4905, CVE-2013-0248,CVE-2014-0050,CVE-2014-3577,CVE-2014-0054,CVE- 2013-7315,CVE-2013-6429,CVE-2014-0119,CVE-2014-0099,CVE-2014-1904)	18 Jun 201801:27	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere MQ shipped with WebSphere Remote Server (CVE-2013-0248)	15 Jun 201807:05	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Commons FileUpload vulnerability affects IBM WebSphere MQ Managed File Transfer (CVE-2013-0248)	15 Jun 201807:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ	20 Feb 202012:42	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "17deab98-7e33-3586-abb0-1811337ee808",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5b9c1e87-3434-3d24-9120-76b6dea2b51f",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-0248
security	www.security.gentoo.org/glsa/202107-39
archives	www.archives.neohapsis.com/archives/bugtraq/2013-03/0035.html
marc	www.marc.info/
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
osvdb	www.osvdb.org/90906
securityfocus	www.securityfocus.com/bid/58326

03 Oct 2025 20:07Current

8.5High risk

Vulners AI Score8.5

CVSS 23.3

EPSS0.00068