Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-2186HistoryOct 28, 2013 - 9:55 p.m.
CVE-2013-2186
2013-10-2821:55:05
Debian Security Bug Tracker
security-tracker.debian.org
22
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.6%
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
Related
nessus
nessus
Debian DSA-2827-1 : libcommons-fileupload-java - arbitrary file upload via deserialization
2013-12-24 00:00:00
RHEL 5 / 6 : JBoss Web Server (RHSA-2013:1428)
2014-11-08 00:00:00
suse
suse
Security update for jakarta-commons-fileupload (important)
2013-11-12 19:04:18
openvas
openvas
Debian Security Advisory DSA 2827-1 (libcommons-fileupload-java - arbitrary file upload via deserialization)
2013-12-24 00:00:00
Ubuntu: Security Advisory (USN-2029-1)
2013-11-18 00:00:00
Ubuntu Update for libcommons-fileupload-java USN-2029-1
2013-11-18 00:00:00
osv
osv
Arbitrary file write in Apache Commons Fileupload
2022-05-14 03:52:43
Deserialization of Untrusted Data in Apache Tomcat
2022-05-17 03:47:51
f5
f5
K63443590 : Apache Commons FileUpload vulnerability CVE-2013-2186
2016-01-21 00:00:00
SOL63443590 - Apache Commons FileUpload vulnerability CVE-2013-2186
2016-01-21 00:00:00
K48758740 : Apache Tomcat vulnerability CVE-2013-2185
2020-01-30 00:00:00
checkpoint_advisories
checkpoint_advisories
veracode
veracode
Arbitrary File Write With Null Byte In File Name
2019-01-15 09:00:40
Arbitrary File Write
2019-01-15 08:58:07
Man-In-The-Middle (MitM)
2019-05-02 05:21:35
nvd
nvd
CVE-2013-2186
2013-10-28 21:55:05
CVE-2013-2185
2014-01-19 18:02:57
prion
prion
Design/Logic Flaw
2013-10-28 21:55:00
Design/Logic Flaw
2014-01-19 18:02:00
redhat
redhat
(RHSA-2013:1442) Important: commons-fileupload security update
2013-10-17 17:17:19
(RHSA-2013:1428) Important: jakarta-commons-fileupload security update
2013-10-15 00:00:00
(RHSA-2013:1429) Important: jakarta-commons-fileupload security update
2013-10-15 18:30:11
github
github
Arbitrary file write in Apache Commons Fileupload
2022-05-14 03:52:43
Deserialization of Untrusted Data in Apache Tomcat
2022-05-17 03:47:51
cvelist
cvelist
CVE-2013-2186
2013-10-28 21:00:00
CVE-2013-2185
2014-01-19 16:00:00
debian
debian
[SECURITY] [DSA 2827-1] libcommons-fileupload-java security update
2013-12-24 05:38:15
[SECURITY] [DSA 2827-1] libcommons-fileupload-java security update
2013-12-24 05:38:15
ubuntu
ubuntu
Apache Commons FileUpload vulnerability
2013-11-13 00:00:00
securityvulns
securityvulns
[USN-2029-1] Apache Commons FileUpload vulnerability
2013-12-09 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-12-09 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-01-25 00:00:00
cve
cve
CVE-2013-2186
2013-10-28 21:55:05
CVE-2013-2185
2014-01-19 18:02:57
ubuntucve
ubuntucve
CVE-2013-2186
2013-10-28 00:00:00
CVE-2013-2185
2014-01-19 00:00:00
freebsd
freebsd
archlinux
archlinux
jenkins: multiple issues
2014-10-02 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.6%
Related for DEBIANCVE:CVE-2013-2186