{"action":"Upgrade commons-fileupload:commons-fileupload to 1.2.2 or later.","affected":[{"fixed":"1.2.2","introduced":"1.0"}],"component":"commons-fileupload:commons-fileupload","cve_ids":["CVE-2013-0248"],"ecosystem":"Maven","epss":0.00788,"exploited":false,"fixed_versions":["1.2.2"],"ghsa_id":"GHSA-vm69-474v-7q2w","id":"tcs_01M5N9EA5TYCAMJQE5ZFP2TZ9M","modified_at":"2024-12-05T05:54:10.545067Z","published_at":"2022-05-05T02:48:41Z","references":["https://osv.dev/vulnerability/GHSA-vm69-474v-7q2w","https://nvd.nist.gov/vuln/detail/CVE-2013-0248","https://security.gentoo.org/glsa/202107-39","http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.html","http://marc.info/?l=bugtraq&m=144050155601375&w=2","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.osvdb.org/90906"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-vm69-474v-7q2w","url":"https://osv.dev/vulnerability/GHSA-vm69-474v-7q2w"}],"summary":"Incorrect Default Permissions in Apache Commons FileUpload"}