Read the docs
Red Hat Security Advisory

RHSA-2014:0252

Red Hat JBoss Enterprise Application Platform 6.2.1 security update

Released 2014-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority HIGH 80

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a craf…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83334 Published 2014-03-28 Partial fix · 1.3.1, 8.0.3 +1 CWE-835