{"action":"Upgrade libcommons-fileupload-java to 1.3-2.1 or later.","affected":[{"fixed":"1.3-2.1","introduced":"0"}],"component":"libcommons-fileupload-java","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.3-2.1"],"id":"tcs_01M5NADBEEJEVJX8CGS9ZDN3H9","modified_at":"2026-09-01T20:03:15.643831144Z","published_at":"2013-10-28T21:55:05.157Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-2186","https://security-tracker.debian.org/tracker/CVE-2013-2186"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-2186#Debian:14/libcommons-fileupload-java","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-2186"}],"summary":"The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write t"}