CVE-2013-2186
HighAdvisory
Published 14 May 2022In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.124
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2
- of 17,781 indexed, latest versions
- Container images
- 15
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Arbitrary file write in Apache Commons Fileupload
Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 15 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-fileuploadmaven | 1.2.1, 1.3 | 1.3.1 | 15 |
- OSV records
- GHSA-qx6h-9567-5fqw
Charts affected
2 by stars
Container images carrying it
15 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| craigwillis/ | ae317d7e4724 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | c44b22eb58bb | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 438d82cdbdb5 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 48c852c1204b | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 072cf5bc6f99 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | f746049515c1 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | f350da56dd55 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 317dd9e56922 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | d244ea8c32ac | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 2ba4af461d51 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 30ee96508c0b | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 1d9cebe3022b | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | f889fe30e2c7 | commons-fileupload | 1.3.1 | 1 |
| ncsapolyglot/ | 97a8c01c076e | commons-fileupload | 1.3.1 | 1 |
| zenko/ | 386a1f48ec0e | commons-fileupload | 1.3.1 | 1 |