Unrated
Apache Struts: DoS via OOM owing to not properly checking of list bounds
CVE-2023-34149
First seen on SecPulse
Original description The description as published by the source.
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.
Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory cwiki.apache.org
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web openwall.com