ID de Prueba:	1.3.6.1.4.1.25623.1.0.104652
Categoría:	Denial of Service
Título:	Apache Commons FileUpload < 1.5 DoS Vulnerability
Resumen:	The Apache Commons FileUpload library is prone to a denial of; service (DoS) vulnerability.
Descripción:	Summary: The Apache Commons FileUpload library is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Apache Commons FileUpload does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Affected Software/OS: Apache Commons FileUpload versions prior to 1.5. Solution: - Update to version 1.5 or later which introduced a new configuration option - Configure the new option (FileUploadBase#setFileCountMax) as is not enabled by default and must be explicitly configured. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-24998 Debian Security Information: DSA-5522 (Google Search) https://www.debian.org/security/2023/dsa-5522 https://security.gentoo.org/glsa/202305-37 https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html http://www.openwall.com/lists/oss-security/2023/05/22/1
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.