Vulnerability GHSA-383p-xqxx-rrmp
Medium Risk
MEDIUM RISK
CVSS Score: 5.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 years ago
May 17, 2022 at 03:42 AM UTC
Denial of service in Apache Struts
2.1.4 - 3.0.11
2.1.4 - 3.0.11
Summary
Denial of service in Apache Struts
Details
Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
3 hours ago
OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies
2.1.4 - 3.4.12 GHSA-crwc-vw2r-qr6m
2.1.4 - 3.4.12 GHSA-crwc-vw2r-qr6m
High Risk
9 months ago
Apache Struts 2 is Missing XML Validation
2.0.5 - 2.3.37 and 2.5 - 6.0.3 GHSA-qcfc-hmrc-59x7
2.0.5 - 2.3.37 and 2.5 - 6.0.3 GHSA-qcfc-hmrc-59x7
High Risk
10 months ago
Apache Struts has a Denial of Service vulnerability
2.0.5 - 6.7.4 and 7.0.0 - 7.0.3 GHSA-rg58-xhh7-mqjw
2.0.5 - 6.7.4 and 7.0.0 - 7.0.3 GHSA-rg58-xhh7-mqjw
High Risk
10 months ago
Apache Struts is Vulnerable to DoS via File Leak
2.0.5 - 2.3.37 and 2.5 - 6.7.4 and 7.0.0 - 7.0.3 GHSA-xx7v-hqxh-cjr9
2.0.5 - 2.3.37 and 2.5 - 6.7.4 and 7.0.0 - 7.0.3 GHSA-xx7v-hqxh-cjr9
Critical
1 year ago
Apache Struts file upload logic is flawed
2.0.5 - 6.3.0.2 GHSA-43mq-6xmg-29vm
2.0.5 - 6.3.0.2 GHSA-43mq-6xmg-29vm
Impacted packages
Timeline
Published
4 years ago
May 17, 2022 at 03:42 AM UTC
Fixed (3.0.12)
Unknown
Unknown
Fixed (2.3.24.3)
Unknown
Unknown
Last Modified
2 years ago
March 14, 2024 at 10:03 PM UTC