{"action":"Upgrade commons-fileupload:commons-fileupload to 1.3.3 or later.","affected":[{"fixed":"1.3.3","introduced":"0"}],"component":"commons-fileupload:commons-fileupload","cve_ids":["CVE-2016-1000031"],"ecosystem":"Maven","epss":0.32739,"exploited":false,"fixed_versions":["1.3.3"],"ghsa_id":"GHSA-7x9j-7223-rg5m","id":"tcs_01M5N8KD5SAFSH30EJG2GE82BB","modified_at":"2024-03-14T05:32:33.085145Z","published_at":"2018-12-21T17:51:51Z","references":["https://osv.dev/vulnerability/GHSA-7x9j-7223-rg5m","https://nvd.nist.gov/vuln/detail/CVE-2016-1000031","https://www.tenable.com/security/research/tra-2016-30","https://www.tenable.com/security/research/tra-2016-23","https://www.tenable.com/security/research/tra-2016-12","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://security.netapp.com/advisory/ntap-20190212-0001","https://lists.apache.org/thread.html/d66657323fd25e437face5e84899c8ca404ccd187e81c3f2fa8b6080@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","https://issues.apache.org/jira/browse/WW-4812","https://issues.apache.org/jira/browse/FILEUPLOAD-279","https://github.com/advisories/GHSA-7x9j-7223-rg5m","http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00036.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/93604","http://www.zerodayinitiative.com/advisories/ZDI-16-570"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7x9j-7223-rg5m","url":"https://osv.dev/vulnerability/GHSA-7x9j-7223-rg5m"}],"summary":"Improper Access Control in commons-fileupload"}