/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2023-24998

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-24998

Severity

7.5

High

CVSS V3

Description

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.

Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.

References

Affected packages


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing