Hi,

Is there a way to try different versions of commons-fileupload (i.e 1.3, 1.4, 
and 1.5) on a Tomcat server (either 9.0 or 10.x)?

fileUpload package paths shipped with Tomcat seems to be different with the 
paths in commons-fileupload so I don't think the class-loader technique here

https://tomcat.apache.org/tomcat-9.0-doc/class-loader-howto.html

"Advanced configuration" section will work.

If not possible, is there a version of Tomcat that has the latest security fix 
in commons-fileupload 1.5?

Thanks,

PD.

Reply via email to