CVE-2026-71257

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload.

Wicket

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket falls back to reading the upload through HttpServletRequest#getParts(). The per-file size limit (for example Form#setFileMaxSize) and the file count limit (Form#setFileCountMax) are not applied to the parts obtained that…

31. Aug 2026

Ausgewertete Quellen

• Hersteller
  https://lists.apache.org/thread/o59f8jz1m09kqdwm73pyyn6hdsxt190q
• Hinweis
  http://www.openwall.com/lists/oss-security/2026/08/30/4
• NVD
  CVE-2026-71257