CVE-2013-0248

CVE-2013-0248 affects Apache Commons FileUpload 1.0–1.2.2. The default javax.servlet.context.tempdir uses the /tmp directory for uploads, enabling a local user to overwrite arbitrary files via an unspecified symlink attack. Impact is local, with file overwrite risk; exploitation is local. The con...