Tag: commons-fileupload

commons-fileupload 1.3.3 resolves deserialisation vulnerability CVE-2016-1000031

15. June 2017

by

Immanuel Sims

in attack, commons-fileupload, cve-2016-1000031, deserialization, java, security, vulnerability

CVE-2016-1000031 is a vulnerabilty in the extremely widely used Apache Commons library commons-fileupload – you might not even know you’re having it on your class path. It has a very nasty Remote Code Execution vulnerability with easy to use exploits publicly available up to version 1.3.2. What makes it even worse is that you do not even…
read more

Cookie Consent Banner by Real Cookie Banner