Unrated
The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a nu...
CVE-2016-4465
First seen on SecPulse
Original description The description as published by the source.
The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory jvn.jp
- advisory jvndb.jvn.jp
- advisory www-01.ibm.com
- advisory oracle.com
- advisory struts.apache.org
- report bugzilla.redhat.com
- web securityfocus.com