Low severityNVD Advisory· Published Mar 15, 2013· Updated Jun 16, 2026
CVE-2013-0248
CVE-2013-0248
Description
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
commons-fileupload:commons-fileuploadMaven | >= 1.0, < 1.2.2 | 1.2.2 |
Affected products
7cpe:2.3:a:apache:commons_fileupload:1.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:apache:commons_fileupload:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:commons_fileupload:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:commons_fileupload:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:commons_fileupload:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:commons_fileupload:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:commons_fileupload:1.2.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- github.com/advisories/GHSA-vm69-474v-7q2wghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2013-0248ghsaADVISORY
- archives.neohapsis.com/archives/bugtraq/2013-03/0035.htmlnvdWEB
- marc.infonvdWEB
- www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlnvdWEB
- www.osvdb.org/90906nvdWEB
- security.gentoo.org/glsa/202107-39nvdWEB
- www.securityfocus.com/bid/58326nvd
News mentions
0No linked articles in our index yet.