CVE-2013-0248

CVE-2013-0248 impacts Apache Commons FileUpload versions 1.0 through 1.2.2. The vulnerability exists because the default configuration of javax.servlet.context.tempdir uses the /tmp directory for uploaded files, which can allow local users to overwrite arbitrary files via an unspecified symlink a...