AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-48976

HIGH · CVSS 7.5 EPSS 67.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-06-16 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache. Its EPSS score suggests a 67.3% probability of exploitation in the next 30 days.

CVE
CVE-2025-48976
Severity
HIGH
CVSS
7.5
EPSS
67.27%
Apache

Original NVD Description

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)