{"action":"Upgrade libcommons-fileupload-java to 1.3.2-1 or later.","affected":[{"fixed":"1.3.2-1","introduced":"0"}],"component":"libcommons-fileupload-java","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.3.2-1"],"id":"tcs_01M5NBJ5DMMQDCW3BYF62SW6F5","modified_at":"2026-10-08T09:47:33.171332876Z","published_at":"2016-07-04T22:59:04.303Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-3092","https://security-tracker.debian.org/tracker/CVE-2016-3092"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-3092","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-3092"}],"summary":"The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allo"}