Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

CVE-2023-24998 FileUpload DoS. Analysis of vulnerability

Description

https://nvd.nist.gov/vuln/detail/CVE-2023-24998 - commons-fileupload:commons-fileupload Denial of Service (DoS)
Severity: High
Modules impacted:

mod-calendar Bama
mod-notes Spitfire
mod-entities-links Spitfire
mod-search Spitfire
mod-password-validator Volaris
mod-tags Volaris
edge-dematic Volaris
edge-caiasoft Volaris
mod-remote-storage Volaris 

Checklist

hide

TestRail: Results

Activity

Show:

Craig McNallyNovember 9, 2023 at 4:15 PM

The affected modules are not affected by this vulnerability.

Julian LadischNovember 8, 2023 at 11:04 AM

edge-fqm also has this vulnerable dependency but doesn't use file uploads and therefore is also not affected.

Julian LadischNovember 2, 2023 at 12:15 PM

All these nine module don't use file uploads and therefore are not affected. The CVE-2023-24998 FileUpload DoS issues have been suppressed in Snyk.

Won't Do

Details

Assignee

Reporter

Priority

RCA Group

TBD

Labels

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created November 1, 2023 at 8:54 PM
Updated May 3, 2024 at 9:09 AM
Resolved November 9, 2023 at 4:15 PM
TestRail: Cases
TestRail: Runs