CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache. Its EPSS score suggests a 46.8% probability of exploitation in the next 30 days.
CVE
CVE-2023-24998
Severity
HIGH
CVSS
7.5
EPSS
46.84%
Apache
Original NVD Description
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.
Related CVEs
Other vulnerabilities affecting the same vendor(s)