CVE-2013-0248
published 2013-03-15CVE-2013-0248: The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which…
PriorityP427medium6.8CVSS 3.1
AVLACLPRNUINSUCNIHAL
EPSS
0.79%
55.9th percentile
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | commons_fileupload | — | — |
| apache | commons_fileupload | — | — |
| apache | commons_fileupload | — | — |
| apache | commons_fileupload | — | — |
| apache | commons_fileupload | — | — |
| apache | commons_fileupload | — | — |
| debian | libcommons-fileupload-java | < libcommons-fileupload-java 1.3-1 (bookworm) | libcommons-fileupload-java 1.3-1 (bookworm) |
CVSS provenance
nvdv3.16.8MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
nvdv2.03.3LOWAV:L/AC:M/Au:N/C:N/I:P/A:P
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache Commons FileUpload up to 1.0 Default Configuration javax.servlet.context.tempdir access control (ID 370183 / BID-58326)
vuldb·2026-10-07·CVSS 6.8
CVE-2013-0248 [MEDIUM] Apache Commons FileUpload up to 1.0 Default Configuration javax.servlet.context.tempdir access control (ID 370183 / BID-58326)
A vulnerability was found in Apache Commons FileUpload up to 1.0. It has been classified as problematic. This affects an unknown function of the file javax.servlet.context.tempdir of the component Default Configuration. This manipulation causes improper access controls.
This vulnerability is registered as CVE-2013-0248. The attack needs to be launched locally. No exploit is available.
OSV
Incorrect Default Permissions in Apache Commons FileUpload
osv·2022-05-05
CVE-2013-0248 [LOW] Incorrect Default Permissions in Apache Commons FileUpload
Incorrect Default Permissions in Apache Commons FileUpload
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
GHSA
Incorrect Default Permissions in Apache Commons FileUpload
ghsa·2022-05-05
CVE-2013-0248 [LOW] CWE-276 Incorrect Default Permissions in Apache Commons FileUpload
Incorrect Default Permissions in Apache Commons FileUpload
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
OSV
CVE-2013-0248: The default configuration of javax
osv·2013-03-15·CVSS 3.3
CVE-2013-0248 [LOW] CVE-2013-0248: The default configuration of javax
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
Red Hat
apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)
vendor_redhat·2013-03-06·CVSS 3.3
CVE-2013-0248 [LOW] CWE-552 apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)
apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
Statement: Red Hat Enterprise Linux 5 and Red Hat Satellite Server 5 are now in Production 3 and Production 2 Phases of the support and maintenance life cycle respectively. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/ and the Red Hat S
Debian
CVE-2013-0248: libcommons-fileupload-java - The default configuration of javax.servlet.context.tempdir in Apache Commons Fil...
vendor_debian·2013·CVSS 3.3
CVE-2013-0248 [LOW] CVE-2013-0248: libcommons-fileupload-java - The default configuration of javax.servlet.context.tempdir in Apache Commons Fil...
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
Scope: local
bookworm: resolved (fixed in 1.3-1)
bullseye: resolved (fixed in 1.3-1)
forky: resolved (fixed in 1.3-1)
sid: resolved (fixed in 1.3-1)
trixie: resolved (fixed in 1.3-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files) [fedora-all]
bugzilla·2013-03-15·CVSS 3.3
CVE-2013-0248 [LOW] CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files) [fedora-all]
CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being
Bugzilla
CVE-2013-0248 apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)
bugzilla·2013-03-15·CVSS 3.3
CVE-2013-0248 [LOW] CVE-2013-0248 apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)
CVE-2013-0248 apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files)
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-0248 to the following vulnerability:
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
References:
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0248
[2] http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.html
[3] http://www.osvdb.org/90906
Discussion:
Created apache-commons-fileupload tracking bugs for this issue
Affects: fedora-all [bug 922147]
---
Mitigation:
By default,
http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.htmlhttp://marc.info/?l=bugtraq&m=144050155601375&w=2http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlhttp://www.osvdb.org/90906http://www.securityfocus.com/bid/58326https://security.gentoo.org/glsa/202107-39http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.htmlhttp://marc.info/?l=bugtraq&m=144050155601375&w=2http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlhttp://www.osvdb.org/90906http://www.securityfocus.com/bid/58326https://security.gentoo.org/glsa/202107-39
2013-03-15
Published