Red Hat Security Advisory

RHSA-2013:1428

jakarta-commons-fileupload security update

Released 2013-10-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el5
Red Hat JBoss Enterprise Web Server 1 for RHEL 6 Server jakarta-commons-fileupload-1:1.1.1-7.7.ep5.el6

Fixes 1 record

TI-2013-01952 CVE-2013-2186 · GHSA-qx6h-9567-5fqw

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1…

MEDIUM 47

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files vi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.12666 Published 2013-10-28 Partial fix · 1.3.1 CWE-20