Information Exposure Affecting commons-fileupload:commons-fileupload Open this link in a new tab package, versions [,1.3.2)
Attack Complexity
Low
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications-
snyk-id
SNYK-JAVA-COMMONSFILEUPLOAD-31540
-
published
17 Feb 2017
-
disclosed
17 Feb 2014
-
credit
Unknown
Introduced: 17 Feb 2014
CWE-200 Open this link in a new tabOverview
commons-fileupload:commons-fileupload
provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.
Affected versions of the package are vulnerable to Information Disclosure because the InputStream
is not closed on exception.
Remediation
Upgrade commons-fileupload
to version 1.3.2 or higher.