Commons Fileupload vulnerabilities

2 known vulnerabilities in Commons Fileupload from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Commons FileUpload: Allocation of Resources Without Limits or Throttling

  CVE-2025-48976Jun 16, 2025ApacheEPSS 34%

  Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade

• 7.5 High severity

  Apache Commons FileUpload: Allocation of Resources Without Limits or Throttling

  CVE-2023-24998Feb 20, 2023ApacheEPSS 48.8%

  Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new co