未評価
The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a nu...
CVE-2016-4465
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory jvn.jp
- advisory jvndb.jvn.jp
- advisory www-01.ibm.com
- advisory oracle.com
- advisory struts.apache.org
- report bugzilla.redhat.com
- web securityfocus.com