Every CVE Search/ Get API key

CVE-2014-0050

Commons FileUpload Denial of service vulnerability

7.5 HighPublic exploitFix available

CVE-2014-0050 is a high vulnerability (CVSS 7.5) in Apache Commons Fileupload, published February 7, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 83.3%, the 99th percentile. Fixed in commons-fileupload:commons-fileupload 1.3.1.

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Exploit likelihood

83.3%Down 7.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List 7.5

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
CVE-2014-0050
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
EUVDEUVD-2018-0825 7.5

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
EUVD-2018-0825
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-xx68-jfcg-xmmf No score

Commons FileUpload Denial of service vulnerability

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
GHSA-xx68-jfcg-xmmf
Weakness
CWE-20
Updated
2026-11-02
NVD 7.5

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
CVE-2014-0050
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-264, CWE-835
Updated
2026-11-02
OSVDEBIAN-CVE-2014-0050 7.5

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
DEBIAN-CVE-2014-0050
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1779324465 No score

TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)

TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.2-tuxcare.3.

Record
CLSA-2026-1779324465
Updated
2026-11-02
Show 10 moreShow less
OSVCLSA-2026-1779410882 No score

TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)

TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.1-tuxcare.3.

Record
CLSA-2026-1779410882
Updated
2026-11-02
OSV No score

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
CVE-2014-0050
Updated
2026-11-02
OSVGHSA-xx68-jfcg-xmmf No score

Commons FileUpload Denial of service vulnerability

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
GHSA-xx68-jfcg-xmmf
Weakness
CWE-20
Updated
2026-11-02
OSVMGASA-2014-0109 No score

Updated apache-commons-fileupload package fixes CVE-2014-0050

Updated apache-commons-fileupload packages fix security vulnerability:

It was discovered that the Apache Commons FileUpload package for Java could enter an infinite loop while processing a multipart request with a crafted Content-Type, resulting in a denial-of-service condition (CVE-2014-0050).

Record
MGASA-2014-0109
Updated
2026-11-02
OSVMGASA-2014-0110 No score

Updated tomcat packages fix CVE-2014-0050

Updated tomcat packages fix security vulnerability:

It was discovered that the Apache Commons FileUpload package for Java could enter an infinite loop while processing a multipart request with a crafted Content-Type, resulting in a denial-of-service condition (CVE-2014-0050).

Tomcat 7 includes an embedded copy of the Apache Commons FileUpload package, and was affected as well.

Record
MGASA-2014-0110
Updated
2026-11-02
OSVopenSUSE-SU-2024:10262-1 No score

jakarta-commons-fileupload-1.1.1-125.11 on GA media

These are all security issues fixed in the jakarta-commons-fileupload-1.1.1-125.11 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10262-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10446-1 No score

tomcat-8.0.36-3.3 on GA media

These are all security issues fixed in the tomcat-8.0.36-3.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10446-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10620-1 No score

apache-commons-fileupload-1.4-1.9 on GA media

These are all security issues fixed in the apache-commons-fileupload-1.4-1.9 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10620-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13441-1 No score

tomcat10-10.1.14-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.14-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13441-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-0050 No score

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Record
UBUNTU-CVE-2014-0050
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
commons-fileupload:commons-fileupload
Maven
 before 1.3.1
1.3.1
org.apache.tomcat:tomcat
Maven
 8.0.0-RC1 to 8.0.1
8.0.3
org.apache.tomcat:tomcat
Maven
 7.0.0 to 7.0.50
7.0.52
commons-fileupload:commons-fileupload
TuxCare:Maven
 1.2.2 up to 1.2.2-tuxcare.3, plus listed versions
1.2.2-tuxcare.11.2.2-tuxcare.2
1.2.2-tuxcare.3
commons-fileupload:commons-fileupload
TuxCare:Maven
 1.2.1 up to 1.2.1-tuxcare.3, plus listed versions
1.2.1-tuxcare.11.2.1-tuxcare.2
1.2.1-tuxcare.3
libcommons-fileupload-java
Debian:12
 before 1.3.1-1
1.3.1-1
libcommons-fileupload-java
Debian:13
 before 1.3.1-1
1.3.1-1
libcommons-fileupload-java
Debian:14
 before 1.3.1-1
1.3.1-1
libcommons-fileupload-java
Debian:6.0
 before 1.2.2-1+deb6u2, plus listed versions
1.2.2-1
1.2.2-1+deb6u2
libcommons-fileupload-java
Debian:7
 before 1.2.2-1+deb7u2, plus listed versions
1.2.2-11.2.2-1+deb7u1
1.2.2-1+deb7u2
Show 89 moreShow less
Affected packages
PackageAffectedFixed
tomcat7
Debian:7
 before 7.0.28-4+deb7u1, plus listed versions
7.0.28-4
7.0.28-4+deb7u1
commons-fileupload:commons-fileupload
Maven
 before 1.3.1, plus listed versions
1.01.0-beta-11.0-rc11.11.1.1
Show 4 moreShow less
1.21.2.11.2.21.3
1.3.1
org.apache.tomcat:tomcat
Maven
 8.0.0-RC1 up to 8.0.3, plus listed versions
8.0.0-RC108.0.0-RC38.0.0-RC58.0.1
8.0.3
org.apache.tomcat:tomcat
Maven
 7.0.0 up to 7.0.52, plus listed versions
7.0.357.0.377.0.397.0.407.0.417.0.427.0.477.0.50
7.0.52
apache-commons-fileupload
Mageia:3
 before 1.2.2-10.1.mga3
1.2.2-10.1.mga3
apache-commons-fileupload
Mageia:4
 before 1.3-5.1.mga4
1.3-5.1.mga4
tomcat
Mageia:3
 before 7.0.41-5.mga3
7.0.41-5.mga3
tomcat
Mageia:4
 before 7.0.47-1.2.mga4
7.0.47-1.2.mga4
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.0-2.Final_redhat_2.1.ep6.el5
0:7.3.0-2.Final_redhat_2.1.ep6.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.0-2.Final_redhat_2.1.ep6.el6
0:7.3.0-2.Final_redhat_2.1.ep6.el6
tomcat6
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-javadoc
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-lib
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-webapps
Red Hat:enterprise_linux:6::client
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-javadoc
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-lib
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-webapps
Red Hat:enterprise_linux:6::computenode
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-lib
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-javadoc
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-webapps
Red Hat:enterprise_linux:6::server
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-el-2.1-api
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-jsp-2.1-api
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-lib
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-servlet-2.5-api
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-admin-webapps
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-docs-webapp
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-javadoc
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6-webapps
Red Hat:enterprise_linux:6::workstation
 before 0:6.0.24-64.el6_5
0:6.0.24-64.el6_5
tomcat6
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-admin-webapps
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-docs-webapp
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-el-2.1-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-javadoc
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-jsp-2.1-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-lib
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-log4j
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-servlet-2.5-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6-webapps
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:6.0.37-19_patch_04.ep6.el5
0:6.0.37-19_patch_04.ep6.el5
tomcat6
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-admin-webapps
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-docs-webapp
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-el-2.1-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-javadoc
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-jsp-2.1-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-lib
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-log4j
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-servlet-2.5-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat6-webapps
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:6.0.37-27_patch_04.ep6.el6
0:6.0.37-27_patch_04.ep6.el6
tomcat7
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-admin-webapps
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-docs-webapp
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-el-2.2-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-javadoc
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-jsp-2.2-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-lib
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-log4j
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-servlet-3.0-api
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7-webapps
Red Hat:jboss_enterprise_web_server:2::el5
 before 0:7.0.40-13_patch_02.ep6.el5
0:7.0.40-13_patch_02.ep6.el5
tomcat7
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-admin-webapps
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-docs-webapp
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-el-2.2-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-javadoc
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-jsp-2.2-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-lib
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-log4j
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-servlet-3.0-api
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat7-webapps
Red Hat:jboss_enterprise_web_server:2::el6
 before 0:7.0.40-9_patch_02.ep6.el6
0:7.0.40-9_patch_02.ep6.el6
tomcat
openSUSE:Tumbleweed
 before 8.0.36-3.3
8.0.36-3.3
apache-commons-fileupload
openSUSE:Tumbleweed
 before 1.4-1.9
1.4-1.9
tomcat10
openSUSE:Tumbleweed
 before 10.1.14-1.1
10.1.14-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBApache Commons FileUpload and Apache Tomcat - Denial of Service2014-02-12
PoC in GitHubjrrdev/cve-2014-00502017-03-15
MetasploitApache Commons FileUpload and Apache Tomcat DoS2014-02-06

History

History
WhenChangedSources
2026-11-03affected, exploits
2026-11-02createdCVE List, EUVD, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

References

Show 155 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open