CVE-2016-3092
HighAdvisory
Published 21 Dec 2018In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.359
- 98th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3
- of 17,781 indexed, latest versions
- Container images
- 16
- deployed by those charts
- Fix available
- 1 of 1
- affected package
High severity vulnerability that affects commons-fileupload:commons-fileupload
Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 16 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-fileuploadmaven | 1.2.1, 1.3, 1.3.1, 1.3.1-jenkins-1 | 1.3.2 | 16 |
- OSV records
- GHSA-fvm3-cfvj-gxqq
Charts affected
3 by stars
Container images carrying it
16 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| craigwillis/ | ae317d7e4724 | commons-fileupload | 1.3.2 | 1 |
| jenkinsci/ | a1f33f004659 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | c44b22eb58bb | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 438d82cdbdb5 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 48c852c1204b | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 072cf5bc6f99 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | f746049515c1 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | f350da56dd55 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 317dd9e56922 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | d244ea8c32ac | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 2ba4af461d51 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 30ee96508c0b | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 1d9cebe3022b | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | f889fe30e2c7 | commons-fileupload | 1.3.2 | 1 |
| ncsapolyglot/ | 97a8c01c076e | commons-fileupload | 1.3.2 | 1 |
| zenko/ | 386a1f48ec0e | commons-fileupload | 1.3.2 | 1 |