{"action":"Upgrade commons-fileupload:commons-fileupload to 1.3.1 or later.","affected":[{"fixed":"1.3.1","introduced":"0"}],"component":"commons-fileupload:commons-fileupload","cve_ids":["CVE-2013-2186"],"ecosystem":"Maven","epss":0.12666,"exploited":false,"fixed_versions":["1.3.1"],"ghsa_id":"GHSA-qx6h-9567-5fqw","id":"tcs_01M5N9AFFCMRFT93M8340MGQJC","modified_at":"2024-12-03T06:08:55.246107Z","published_at":"2022-05-14T03:52:43Z","references":["https://osv.dev/vulnerability/GHSA-qx6h-9567-5fqw","https://nvd.nist.gov/vuln/detail/CVE-2013-2186","https://github.com/apache/commons-fileupload/commit/163a6061fbc077d4b6e4787d26857c2baba495d1","https://access.redhat.com/errata/RHSA-2016:0070","https://exchange.xforce.ibmcloud.com/vulnerabilities/88133","https://github.com/apache/commons-fileupload","https://github.com/apache/commons-fileupload/blob/master/RELEASE-NOTES.txt","https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01","https://www.tenable.com/security/research/tra-2016-23","http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00008.html","http://lists.opensuse.org/opensuse-updates/2013-10/msg00033.html","http://lists.opensuse.org/opensuse-updates/2013-10/msg00050.html","http://rhn.redhat.com/errata/RHSA-2013-1448.html","http://ubuntu.com/usn/usn-2029-1","http://www.debian.org/security/2013/dsa-2827","http://www.securityfocus.com/bid/63174"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qx6h-9567-5fqw","url":"https://osv.dev/vulnerability/GHSA-qx6h-9567-5fqw"}],"summary":"Arbitrary file write in Apache Commons Fileupload"}