[AXIS2-5853] Update commons fileupload to 1.3.3: Fixes CVE-2016-1000031

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.5
• Fix Version/s: 1.7.6
• Component/s: kernel
• Assignee: Unassigned
• Reporter: Mark Symons
• Created: 16/Jun/17 13:35
• Updated: 18/Jun/17 15:06
• Resolved: 18/Jun/17 15:06

Description

org.apache.axis2:axis2-kernel v1.7.5 has a commons-fileupload:commons-fileupload v1.3.1 compile dependency

Update commons-fileupload to v1.3.3, which addresses CVE-2016-1000031 (CVE CVSS 3.0: 9.8)

The threat was addressed in FILEUPLOAD-279