GHSA-86vq-8qhc-5rqwMediumCVSS 5.9

Apache Struts vulnerable to possible DoS attack when using URLValidator

Published
May 14, 2022
Last Modified
January 4, 2024

🔗 CVE IDs covered (1)

CVE-2016-8738 →

📋 Description

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.

🎯 Affected products1

  • maven/org.apache.struts:struts2-core:>= 2.5.0, < 2.5.13

🔗 References (5)