CVE-2023-41835
Apache Struts: excessive disk usage
Summary
Apache Struts: excessive disk usage
Original description
The description as published by the source.
When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multipart.saveDir even if the request has been denied.
Users are recommended to upgrade to versions Struts 2.5.32 or 6.1.2.2 or Struts 6.3.0.1 or greater, which fixe this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- web repo.maven.apache.org
- web openwall.com