CVE-2023-41835
Apache Struts: excessive disk usage
Résumé
Apache Struts: excessive disk usage
Description d'origine
La description telle que publiée par la source (souvent en anglais).
When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multipart.saveDir even if the request has been denied.
Users are recommended to upgrade to versions Struts 2.5.32 or 6.1.2.2 or Struts 6.3.0.1 or greater, which fixe this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- web repo.maven.apache.org
- web openwall.com