PT-2013-2187

Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions 1.0 through 1.2.2 Description The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrar...