CVE-2013-0248Published
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2013-0248 · Microsoft / collected KEV context
cve-program · CVE-2013-0248
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.