CVE-2016-1000031

Description

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

How to fix CVE-2016-1000031

To remediate CVE-2016-1000031, upgrade the affected package to a fixed version below.

• Debian/libcommons-fileupload-java—no fix listed
• Maven/commons-fileupload:commons-fileupload—upgrade to 1.3.3 or later

Is CVE-2016-1000031 being exploited?

Likely — EPSS is 56.4%, placing CVE-2016-1000031 in the top tier of vulnerabilities by exploitation probability. Prioritise patching.

Affected packages (2)

• from 0
• from 0, < 1.3.3

CVSS scores

References (27)

• ADVISORYgithub.com/advisories/GHSA-7x9j-7223-rg5m
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2016-1000031
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2016-1000031
• WEBlists.opensuse.org/opensuse-security-announce/2019-05/msg00036.html