Feed/CVE-2014-0050

CVE-2014-0050HIGHCVSS 7.5

CVE-2014-0050

Published Apr 1, 2014·Updated Oct 7, 2026

NVD Description

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Public Exploits & PoCs1 found

[POC] CVE-2014-0050 — cve-2014-0050

CVE-2014-0050 Vulnerable site sample

Community Discussion

Hacker News

Apache Tomcat 7.0.52 released Fix CVE-2014-0050

Apache Tomcat Denial of Service (CVE-2014-0050)

CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS

Apache Commons FileUpload 1.3.3 Released CVE-2014-0050

CVSS Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free