commons-fileuploads:1.3 -> SECURITY - CVE-2013-0248, see http://seclists.org/fulldisclosure/2013/Mar/76