CVE-2023-24998

HIGH7.5EPSS 33.9%

tomcat9 - security update

發布日:2023/2/20修改日:2026/4/28
也稱為:DEBIAN-CVE-2023-24998

描述

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.

受影響套件(9)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(22)