Description
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.
References
https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy