Non évaluée
The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a nu...
CVE-2016-4465
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory jvn.jp
- advisory jvndb.jvn.jp
- advisory www-01.ibm.com
- advisory oracle.com
- advisory struts.apache.org
- report bugzilla.redhat.com
- web securityfocus.com