CVE-2013-2186
Arbitrary file write in Apache Commons Fileupload
7.5 HighPublic exploitFix available
CVE-2013-2186 is a high vulnerability (CVSS 7.5) in Redhat Jboss Enterprise Brms Platform, published October 28, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.7%, the 96th percentile. Fixed in commons-fileupload:commons-fileupload 1.3.1.
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
Exploit likelihood
12.7%Down 29.4 points since Feb 4, 2022
What each source reports
NVD Score used
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
- Record
CVE-2013-2186- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
- Record
CVE-2013-2186- Updated
- 2026-11-02
EUVDEUVD-2022-5056 No score
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
- Record
EUVD-2022-5056- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qx6h-9567-5fqw No score
Arbitrary file write in Apache Commons Fileupload
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
- Record
GHSA-qx6h-9567-5fqw- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVCLSA-2026-1776040405 No score
TuxCare security update for commons-fileupload:commons-fileupload (3 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 3 CVEs. Fixed in 1.2.2-tuxcare.1.
- Record
CLSA-2026-1776040405- Updated
- 2026-11-02
OSVCLSA-2026-1776040406 No score
TuxCare security update for commons-fileupload:commons-fileupload (3 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 3 CVEs. Fixed in 1.2.1-tuxcare.1.
- Record
CLSA-2026-1776040406- Updated
- 2026-11-02
Show 5 moreShow less
OSV No score
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
- Record
CVE-2013-2186- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2186 No score
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
- Record
DEBIAN-CVE-2013-2186- Updated
- 2026-11-02
OSVGHSA-qx6h-9567-5fqw No score
Arbitrary file write in Apache Commons Fileupload
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
- Record
GHSA-qx6h-9567-5fqw- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10262-1 No score
jakarta-commons-fileupload-1.1.1-125.11 on GA media
These are all security issues fixed in the jakarta-commons-fileupload-1.1.1-125.11 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10262-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10620-1 No score
apache-commons-fileupload-1.4-1.9 on GA media
These are all security issues fixed in the apache-commons-fileupload-1.4-1.9 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10620-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
commons-fileupload:commons-fileuploadMaven |
before 1.3.1 | 1.3.1 |
commons-fileupload:commons-fileuploadTuxCare:Maven |
1.2.2 up to 1.2.2-tuxcare.1 | 1.2.2-tuxcare.1 |
commons-fileupload:commons-fileuploadTuxCare:Maven |
1.2.1 up to 1.2.1-tuxcare.1 | 1.2.1-tuxcare.1 |
libcommons-fileupload-javaDebian:12 |
before 1.3-2.1 | 1.3-2.1 |
libcommons-fileupload-javaDebian:13 |
before 1.3-2.1 | 1.3-2.1 |
libcommons-fileupload-javaDebian:14 |
before 1.3-2.1 | 1.3-2.1 |
libcommons-fileupload-javaDebian:6.0 |
before 1.2.2-1+deb6u1, plus listed versions 1.2.2-1 |
1.2.2-1+deb6u1 |
libcommons-fileupload-javaDebian:7 |
before 1.2.2-1+deb7u1, plus listed versions 1.2.2-1 |
1.2.2-1+deb7u1 |
commons-fileupload:commons-fileuploadMaven |
before 1.3.1, plus listed versions 1.01.0-beta-11.0-rc11.11.1.1 Show 4 moreShow less1.21.2.11.2.21.3 |
1.3.1 |
jakarta-commons-fileuploadRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:1.1.1-7.7.ep5.el5 | 1:1.1.1-7.7.ep5.el5 |
Show 139 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jakarta-commons-fileuploadRed Hat:jboss_enterprise_web_server:1::el6 |
before 1:1.1.1-7.7.ep5.el6 | 1:1.1.1-7.7.ep5.el6 |
atomic-openshiftRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-clientsRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-clients-redistributableRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-dockerregistryRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-masterRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-nodeRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-podRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-recycleRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-sdn-ovsRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-utilsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
heapsterRed Hat:openshift:3.1::el7 |
before 0:0.18.2-3.gitaf4752e.el7aos | 0:0.18.2-3.gitaf4752e.el7aos |
jenkinsRed Hat:openshift:3.1::el7 |
before 0:1.625.3-2.el7aos | 0:1.625.3-2.el7aos |
nodejs-align-textRed Hat:openshift:3.1::el7 |
before 0:0.1.3-2.el7aos | 0:0.1.3-2.el7aos |
nodejs-ansi-greenRed Hat:openshift:3.1::el7 |
before 0:0.1.1-1.el7aos | 0:0.1.1-1.el7aos |
nodejs-ansi-wrapRed Hat:openshift:3.1::el7 |
before 0:0.1.0-1.el7aos | 0:0.1.0-1.el7aos |
nodejs-anymatchRed Hat:openshift:3.1::el7 |
before 0:1.3.0-1.el7aos | 0:1.3.0-1.el7aos |
nodejs-arr-diffRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-arr-flattenRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-array-uniqueRed Hat:openshift:3.1::el7 |
before 0:0.2.1-1.el7aos | 0:0.2.1-1.el7aos |
nodejs-arrifyRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-async-eachRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-binary-extensionsRed Hat:openshift:3.1::el7 |
before 0:1.3.1-1.el7aos | 0:1.3.1-1.el7aos |
nodejs-bracesRed Hat:openshift:3.1::el7 |
before 0:1.8.2-2.el7aos | 0:1.8.2-2.el7aos |
nodejs-capture-stack-traceRed Hat:openshift:3.1::el7 |
before 0:1.0.0-2.el7aos | 0:1.0.0-2.el7aos |
nodejs-chokidarRed Hat:openshift:3.1::el7 |
before 0:1.4.1-2.el7aos | 0:1.4.1-2.el7aos |
nodejs-configstoreRed Hat:openshift:3.1::el7 |
before 0:1.4.0-1.el7aos | 0:1.4.0-1.el7aos |
nodejs-create-error-classRed Hat:openshift:3.1::el7 |
before 0:2.0.1-2.el7aos | 0:2.0.1-2.el7aos |
nodejs-deep-extendRed Hat:openshift:3.1::el7 |
before 0:0.3.2-2.el7aos | 0:0.3.2-2.el7aos |
nodejs-duplexerRed Hat:openshift:3.1::el7 |
before 0:0.1.1-2.el7aos | 0:0.1.1-2.el7aos |
nodejs-duplexifyRed Hat:openshift:3.1::el7 |
before 0:3.4.2-1.el7aos | 0:3.4.2-1.el7aos |
nodejs-end-of-streamRed Hat:openshift:3.1::el7 |
before 0:1.1.0-2.el7aos | 0:1.1.0-2.el7aos |
nodejs-error-exRed Hat:openshift:3.1::el7 |
before 0:1.2.0-1.el7aos | 0:1.2.0-1.el7aos |
nodejs-es6-promiseRed Hat:openshift:3.1::el7 |
before 0:3.0.2-2.el7aos | 0:3.0.2-2.el7aos |
nodejs-event-streamRed Hat:openshift:3.1::el7 |
before 0:3.3.2-1.el7aos | 0:3.3.2-1.el7aos |
nodejs-expand-bracketsRed Hat:openshift:3.1::el7 |
before 0:0.1.4-1.el7aos | 0:0.1.4-1.el7aos |
nodejs-expand-rangeRed Hat:openshift:3.1::el7 |
before 0:1.8.1-1.el7aos | 0:1.8.1-1.el7aos |
nodejs-extglobRed Hat:openshift:3.1::el7 |
before 0:0.3.1-1.el7aos | 0:0.3.1-1.el7aos |
nodejs-filename-regexRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-fill-rangeRed Hat:openshift:3.1::el7 |
before 0:2.2.3-1.el7aos | 0:2.2.3-1.el7aos |
nodejs-for-inRed Hat:openshift:3.1::el7 |
before 0:0.1.4-1.el7aos | 0:0.1.4-1.el7aos |
nodejs-for-ownRed Hat:openshift:3.1::el7 |
before 0:0.1.3-1.el7aos | 0:0.1.3-1.el7aos |
nodejs-fromRed Hat:openshift:3.1::el7 |
before 0:0.1.3-2.el7aos | 0:0.1.3-2.el7aos |
nodejs-glob-baseRed Hat:openshift:3.1::el7 |
before 0:0.3.0-1.el7aos | 0:0.3.0-1.el7aos |
nodejs-glob-parentRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-gotRed Hat:openshift:3.1::el7 |
before 0:5.2.1-1.el7aos | 0:5.2.1-1.el7aos |
nodejs-graceful-fsRed Hat:openshift:3.1::el7 |
before 0:4.1.2-1.el7aos | 0:4.1.2-1.el7aos |
nodejs-iniRed Hat:openshift:3.1::el7 |
before 0:1.1.0-6.el7aos | 0:1.1.0-6.el7aos |
nodejs-is-binary-pathRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-is-dotfileRed Hat:openshift:3.1::el7 |
before 0:1.0.2-1.el7aos | 0:1.0.2-1.el7aos |
nodejs-is-equal-shallowRed Hat:openshift:3.1::el7 |
before 0:0.1.3-1.el7aos | 0:0.1.3-1.el7aos |
nodejs-is-extendableRed Hat:openshift:3.1::el7 |
before 0:0.1.1-1.el7aos | 0:0.1.1-1.el7aos |
nodejs-is-extglobRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-globRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-is-npmRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-numberRed Hat:openshift:3.1::el7 |
before 0:2.1.0-1.el7aos | 0:2.1.0-1.el7aos |
nodejs-is-plain-objRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-primitiveRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-is-redirectRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-streamRed Hat:openshift:3.1::el7 |
before 0:1.0.1-2.el7aos | 0:1.0.1-2.el7aos |
nodejs-isobjectRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-kind-ofRed Hat:openshift:3.1::el7 |
before 0:3.0.2-1.el7aos | 0:3.0.2-1.el7aos |
nodejs-latest-versionRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-lazy-cacheRed Hat:openshift:3.1::el7 |
before 0:1.0.2-1.el7aos | 0:1.0.2-1.el7aos |
nodejs-lodash.assignRed Hat:openshift:3.1::el7 |
before 0:3.2.0-1.el7aos | 0:3.2.0-1.el7aos |
nodejs-lodash.baseassignRed Hat:openshift:3.1::el7 |
before 0:3.2.0-1.el7aos | 0:3.2.0-1.el7aos |
nodejs-lodash.basecopyRed Hat:openshift:3.1::el7 |
before 0:3.0.1-1.el7aos | 0:3.0.1-1.el7aos |
nodejs-lodash.bindcallbackRed Hat:openshift:3.1::el7 |
before 0:3.0.1-1.el7aos | 0:3.0.1-1.el7aos |
nodejs-lodash.createassignerRed Hat:openshift:3.1::el7 |
before 0:3.1.1-1.el7aos | 0:3.1.1-1.el7aos |
nodejs-lodash.defaultsRed Hat:openshift:3.1::el7 |
before 0:3.1.2-1.el7aos | 0:3.1.2-1.el7aos |
nodejs-lodash.getnativeRed Hat:openshift:3.1::el7 |
before 0:3.9.1-1.el7aos | 0:3.9.1-1.el7aos |
nodejs-lodash.isargumentsRed Hat:openshift:3.1::el7 |
before 0:3.0.4-1.el7aos | 0:3.0.4-1.el7aos |
nodejs-lodash.isarrayRed Hat:openshift:3.1::el7 |
before 0:3.0.4-1.el7aos | 0:3.0.4-1.el7aos |
nodejs-lodash.isiterateecallRed Hat:openshift:3.1::el7 |
before 0:3.0.9-1.el7aos | 0:3.0.9-1.el7aos |
nodejs-lodash.keysRed Hat:openshift:3.1::el7 |
before 0:3.1.2-1.el7aos | 0:3.1.2-1.el7aos |
nodejs-lodash.restparamRed Hat:openshift:3.1::el7 |
before 0:3.6.1-1.el7aos | 0:3.6.1-1.el7aos |
nodejs-lowercase-keysRed Hat:openshift:3.1::el7 |
before 0:1.0.0-2.el7aos | 0:1.0.0-2.el7aos |
nodejs-map-streamRed Hat:openshift:3.1::el7 |
before 0:0.1.0-2.el7aos | 0:0.1.0-2.el7aos |
nodejs-micromatchRed Hat:openshift:3.1::el7 |
before 0:2.3.5-2.el7aos | 0:2.3.5-2.el7aos |
nodejs-mkdirpRed Hat:openshift:3.1::el7 |
before 0:0.5.0-2.el7aos | 0:0.5.0-2.el7aos |
nodejs-node-status-codesRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-nodemonRed Hat:openshift:3.1::el7 |
before 0:1.8.1-2.el7aos | 0:1.8.1-2.el7aos |
nodejs-normalize-pathRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-object-assignRed Hat:openshift:3.1::el7 |
before 0:4.0.1-1.el7aos | 0:4.0.1-1.el7aos |
nodejs-object.omitRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-optimistRed Hat:openshift:3.1::el7 |
before 0:0.4.0-5.el7aos | 0:0.4.0-5.el7aos |
nodejs-os-homedirRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-os-tmpdirRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-osenvRed Hat:openshift:3.1::el7 |
before 0:0.1.0-2.el7aos | 0:0.1.0-2.el7aos |
nodejs-package-jsonRed Hat:openshift:3.1::el7 |
before 0:2.3.0-1.el7aos | 0:2.3.0-1.el7aos |
nodejs-parse-globRed Hat:openshift:3.1::el7 |
before 0:3.0.4-1.el7aos | 0:3.0.4-1.el7aos |
nodejs-parse-jsonRed Hat:openshift:3.1::el7 |
before 0:2.2.0-2.el7aos | 0:2.2.0-2.el7aos |
nodejs-pause-streamRed Hat:openshift:3.1::el7 |
before 0:0.0.11-2.el7aos | 0:0.0.11-2.el7aos |
nodejs-pinkieRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-pinkie-promiseRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-prepend-httpRed Hat:openshift:3.1::el7 |
before 0:1.0.1-2.el7aos | 0:1.0.1-2.el7aos |
nodejs-preserveRed Hat:openshift:3.1::el7 |
before 0:0.2.0-1.el7aos | 0:0.2.0-1.el7aos |
nodejs-ps-treeRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-randomaticRed Hat:openshift:3.1::el7 |
before 0:1.1.5-1.el7aos | 0:1.1.5-1.el7aos |
nodejs-rcRed Hat:openshift:3.1::el7 |
before 0:1.1.2-1.el7aos | 0:1.1.2-1.el7aos |
nodejs-read-all-streamRed Hat:openshift:3.1::el7 |
before 0:3.0.1-3.el7aos | 0:3.0.1-3.el7aos |
nodejs-readdirpRed Hat:openshift:3.1::el7 |
before 0:2.0.0-2.el7aos | 0:2.0.0-2.el7aos |
nodejs-regex-cacheRed Hat:openshift:3.1::el7 |
before 0:0.4.2-1.el7aos | 0:0.4.2-1.el7aos |
nodejs-registry-urlRed Hat:openshift:3.1::el7 |
before 0:3.0.3-1.el7aos | 0:3.0.3-1.el7aos |
nodejs-repeat-elementRed Hat:openshift:3.1::el7 |
before 0:1.1.2-1.el7aos | 0:1.1.2-1.el7aos |
nodejs-semverRed Hat:openshift:3.1::el7 |
before 0:5.1.0-1.el7aos | 0:5.1.0-1.el7aos |
nodejs-semver-diffRed Hat:openshift:3.1::el7 |
before 0:2.1.0-1.el7aos | 0:2.1.0-1.el7aos |
nodejs-slideRed Hat:openshift:3.1::el7 |
before 0:1.1.5-3.el7aos | 0:1.1.5-3.el7aos |
nodejs-splitRed Hat:openshift:3.1::el7 |
before 0:0.3.3-2.el7aos | 0:0.3.3-2.el7aos |
nodejs-stream-combinerRed Hat:openshift:3.1::el7 |
before 0:0.2.1-2.el7aos | 0:0.2.1-2.el7aos |
nodejs-string-lengthRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-strip-json-commentsRed Hat:openshift:3.1::el7 |
before 0:1.0.2-2.el7aos | 0:1.0.2-2.el7aos |
nodejs-success-symbolRed Hat:openshift:3.1::el7 |
before 0:0.1.0-1.el7aos | 0:0.1.0-1.el7aos |
nodejs-throughRed Hat:openshift:3.1::el7 |
before 0:2.3.4-4.el7aos | 0:2.3.4-4.el7aos |
nodejs-timed-outRed Hat:openshift:3.1::el7 |
before 0:2.0.0-3.el7aos | 0:2.0.0-3.el7aos |
nodejs-touchRed Hat:openshift:3.1::el7 |
before 0:1.0.0-2.el7aos | 0:1.0.0-2.el7aos |
nodejs-undefsafeRed Hat:openshift:3.1::el7 |
before 0:0.0.3-1.el7aos | 0:0.0.3-1.el7aos |
nodejs-unzip-responseRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-update-notifierRed Hat:openshift:3.1::el7 |
before 0:0.6.0-1.el7aos | 0:0.6.0-1.el7aos |
nodejs-url-parse-laxRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-uuidRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-write-file-atomicRed Hat:openshift:3.1::el7 |
before 0:1.1.2-2.el7aos | 0:1.1.2-2.el7aos |
nodejs-xdg-basedirRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nss_wrapperRed Hat:openshift:3.1::el7 |
before 0:1.0.3-1.el7 | 0:1.0.3-1.el7 |
nss_wrapper-debuginfoRed Hat:openshift:3.1::el7 |
before 0:1.0.3-1.el7 | 0:1.0.3-1.el7 |
openshift-ansibleRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-docsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-filter-pluginsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-lookup-pluginsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-playbooksRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-rolesRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openvswitchRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
openvswitch-debuginfoRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
openvswitch-develRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
openvswitch-testRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
origin-kibanaRed Hat:openshift:3.1::el7 |
before 0:0.5.0-1.el7aos | 0:0.5.0-1.el7aos |
python-openvswitchRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
tuned-profiles-atomic-openshift-nodeRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
apache-commons-fileuploadopenSUSE:Tumbleweed |
before 1.4-1.9 | 1.4-1.9 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | GrrrDog/ACEDcup | 2016-02-08 |
| PoC in GitHub | sa1g0n1337/CVE_2013_2186 | 2019-04-23 |
| PoC in GitHub | sa1g0n1337/Payload_CVE_2013_2186 | 2019-04-23 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
References
rhn.redhat.com/errata/RHSA-2013-1430.html
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
exchange.xforce.ibmcloud.com/vulnerabilities/88133
lists.opensuse.org/opensuse-updates/2013-10/msg00033.html
Show 194 moreShow less
secunia.com/advisories/55716
debian.org/security/2013/dsa-2827
access.redhat.com/errata/RHSA-2016:0070
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
tenable.com/security/research/tra-2016-23
securityfocus.com/bid/63174
ubuntu.com/usn/usn-2029-1
nvd.nist.gov/vuln/detail/CVE-2013-2186
github.com/apache/commons-fileupload/blob/master/RELEASE-NOTES.txt
security-tracker.debian.org/tracker/CVE-2013-2186
bugzilla.redhat.com/show_bug.cgi?id=974814
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1428.json
cve.org/CVERecord?id=CVE-2013-2186
cisa.gov/known-exploited-vulnerabilities-catalog
suse.com/security/cve/CVE-2013-2186
This page doesn't list everything
Left out here: 1 reference. The JSON record has them.