ID:9825 - Exploit for Allocation of Resources Without Limits or Throttling in Apache Commons FileUpload - CVE-2023-24998

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to Apache Commons FileUpload does not limit the number of request parts. A remote attacker can initiate a series of uploads and perform a denial of service (DoS) attack.

Remediation