CVE-2014-0050

High

Published: 01/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

Apache Commons FileUpload before version 1.3.1 has a vulnerability that allows remote attackers to cause a denial of service via a crafted Content-Type header. This can lead to an infinite loop and high CPU consumption.

Risk Assessment

Organizations may experience significant disruptions in service availability, potentially leading to loss of application and resource accessibility.

Recommendation

It is recommended to update Apache Commons FileUpload to version 1.3.1 or later to mitigate this vulnerability.

Other vulnerabilities in Apache Commons FileUpload

CVE-2016-1000031Critical
Apache Commons FileUpload before version 1.3.3 has a vulnerability that allows remote code execution through DiskFileItem file manipulation.

Original NVD description (English source)

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.