[java-sig-commits] [Bug 1869682] New: CVE-2019-0233 struts: access permission override when performing a file upload leads to DoS

https://bugzilla.redhat.com/show_bug.cgi?id=1869682

Bug ID: 1869682
           Summary: CVE-2019-0233 struts: access permission override when
                    performing a file upload leads to DoS
           Product: Security Response
          Hardware: All
                OS: Linux
            Status: NEW
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail], [e-mail],
                    [e-mail]
  Target Milestone: ---
    Classification: Other

When a file upload is performed to an Action that exposes the file with a
getter, an attacker may manipulate the request such that the working copy of
the uploaded file is set to read-only. As a result, subsequent actions on the
file will fail with an error. It might also be possible to set the Servlet
container's temp directory to read only, such that subsequent upload actions
will fail.

Reference:
https://cwiki.apache.org/confluence/display/WW/S2-060