[WICKET-5502] Patch FileUploadBase to fix CVE-2014-0050

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.11, 6.13.0
• Fix Version/s: 6.14.0, 7.0.0-M1, 1.5.12
• Component/s: wicket
• Assignee: Martin Tzvetanov Grigorov
• Reporter: Martin Tzvetanov Grigorov
• Created: 07/Feb/14 14:15
• Updated: 07/Feb/14 14:47
• Resolved: 07/Feb/14 14:16

Description

Wicket has local copy of commons-fileupload files to avoid having dependency to third party libraries.
Recently a security vulnerability has been found in commons-fileupload that is fixed in 1.3.1.
Wicket copy should be patched as well.

Issue Links

• relates to: WICKET-5503 Remove local copies of Commons FileUpload files and use Maven dependency