CVE-2016-3092

CVE-2016-3092 is a DoS in Apache Commons FileUpload via a crafted long multipart boundary. Affected: Commons FileUpload before 1.3.2 used in Tomcat 7.x up to 7.0.70, Tomcat 8.x up to 8.0.36, Tomcat 8.5.x up to 8.5.3, Tomcat 9.x up to 9.0.0.M7, and other products. Root cause: boundary length trigg...

CVE-2016-1000031

The CVE-2016-1000031 entry concerns Apache Commons FileUpload prior to version 1.3.3, where DiskFileItem handling allowed remote code execution. Connected advisories show Atlassian Fisheye/Crucible assemblies using a vulnerable library and updating to the safe version; F5 advisories list Traffix ...