CVE-2025-48976
EUVD-2025-1840716.06.2025, 15:15
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | commons_fileupload | 1.0 ≤ 𝑥 < 1.6 |
| apache | commons_fileupload | 2.0.0:m1 |
| apache | commons_fileupload | 2.0.0:m1-rc1 |
| apache | commons_fileupload | 2.0.0:m2 |
| apache | commons_fileupload | 2.0.0:m2-rc1 |
| apache | commons_fileupload | 2.0.0:m3 |
| apache | commons_fileupload | 2.0.0:m3-rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libcommons-fileupload-java |
| ||||||||||||
| tomcat10 |
| ||||||||||||
| tomcat11 |
| ||||||||||||
| tomcat9 |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| tomcat |
| ||||||||
| tomcat-admin-webapps |
| ||||||||
| tomcat-docs-webapp |
| ||||||||
| tomcat-el-3.0-api |
| ||||||||
| tomcat-jsp-2.3-api |
| ||||||||
| tomcat-lib |
| ||||||||
| tomcat-servlet-4.0-api |
| ||||||||
| tomcat-webapps |
|