Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-48976

Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

Description

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Commons FileUpload

Default version status: unaffected

  • 1.0 to < 1.6affected

Apache Software Foundation Apache Commons FileUpload

Default version status: unaffected

  • 2.0.0-M1 to < 2.0.0-M4affected

References