未評価
Apache Struts: DoS via OOM owing to not properly checking of list bounds
CVE-2023-34149
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.
Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory cwiki.apache.org
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web openwall.com