/usr/share/java/commons-fileupload-1.3.1.jar is in libcommons-fileupload-java 1.3.1-1+deb8u1.
This file is owned by root:root, with mode 0o777.
It is a symlink to /usr/share/java/commons-fileupload.jar
/usr/share/java/commons-fileupload.jar