suse · CVE-2016-1000031

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-1000031 severity critical: SUSE including 11 source package names (jakarta-commons-fileupload-1.1.1-1.37.3.1, jakarta-commons-fileupload-1.1.1-122.3.1, …), 66 product×package rows across 35 product lines (SUSE Enterprise Storage 4, SUSE Linux Enterprise High Performance Computing 12 SP5, … (35 product lines)): Fixed 60, Known Not Affected 6.

Description:

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution