Non évaluée
Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms
CVE-2023-34396
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.
Upgrade to Struts 2.5.31 or 6.1.2.1 or greater
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory cwiki.apache.org
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web openwall.com