← Vulnerability feed

Vulnerability record · CVE-2013-0248 · published 15 March 2013

CVE-2013-0248: Apache commons fileupload permissions and access controls vulnerability

Apache · Commons Fileupload

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

3.3 CVSS 2.0 Low EPSS 0.68% · top 49.6% CWE-264 · Permissions and access controls
3.3CVSS 2.0 base score
0.68%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

AV:L/AC:M/Au:N/C:N/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.html
http://marc.info/?l=bugtraq&m=144050155601375&w=2
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
http://www.osvdb.org/90906
http://www.securityfocus.com/bid/58326
https://security.gentoo.org/glsa/202107-39
http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.html
http://marc.info/?l=bugtraq&m=144050155601375&w=2
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
http://www.osvdb.org/90906
http://www.securityfocus.com/bid/58326
https://security.gentoo.org/glsa/202107-39

Track CVE-2013-0248 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-1000031Apache commons fileupload improper access control vulnerabilityApache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code ExecutionEPSS 34%7.5CVE-2025-48976Apache commons fileupload allocation without limits vulnerabilityAllocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects A…EPSS 33%7.5CVE-2023-24998Apache Commons FileUpload unbounded request parts denial of serviceApache Commons FileUpload before 1.5 does not limit the number of request parts processed, so an attacker can send a malicious upload or a series of …EPSS 49%analysed7.5CVE-2016-3092Hp icewall identity manager improper input validation vulnerabilityThe MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.…EPSS 36%7.5CVE-2014-0050Apache Commons FileUpload Content-Type header denial of serviceMultipartStream.java in Apache Commons FileUpload before 1.3.1 fails to properly terminate a parsing loop when handling a crafted Content-Type header…EPSS 83%analysed5.1CVE-2015-3246libuser userhelper direct /etc/passwd write race conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used by the userhelper program in the usermode package, modifies /etc/passwd directly instead of …KEVEPSS 8.8%analysed6.6CVE-2015-1769Windows Mount Manager symlink mishandling allows local privilege escalationThe Windows Mount Manager mishandles symbolic links, allowing a crafted USB device to trigger arbitrary code execution. Because the flaw is in a core…KEVEPSS 4.1%analysed7.8CVE-2016-3643SolarWinds Virtualization Manager sudo misconfiguration privilege escalationSolarWinds Virtualization Manager 6.3.1 and earlier ship with a misconfigured sudo policy that lets a local user run privileged commands, as shown by…KEVEPSS 3.7%analysed

Source: NIST National Vulnerability Database (record CVE-2013-0248), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.