GHSA-xcrm-qpp8-hcw4MediumCVSS 6.2

Moderate severity vulnerability that affects org.apache.struts:struts2-rest-plugin

Published
October 16, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2017-15707 →

📋 Description

In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.

🎯 Affected products1

  • maven/org.apache.struts:struts2-rest-plugin:>= 2.5.0, <= 2.5.14

🔗 References (8)