Denial of service in Apache Struts

Published: 2017-08-09 12:48:20 | Updated: 2017-08-16
Severity Low
Patch available YES
Number of vulnerabilities 1
CVE ID CVE-2017-7672
Exploitation vector Network
Public exploit N/A
Vulnerable software Apache Struts
Vulnerable software versions Apache Struts
Apache Struts 2.5.10
Apache Struts 2.5.9

Show more

Vendor URL Apache Foundation

Security Advisory

1) Denial of service


The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to an error when processing malicious user-supplied data. A remote attacker can send specially crafted URL data to an application that accepts a user-provided URL in a form field and that processes the URL with the built-in URLValidator to overload the server process during validation.

Successful exploitation of the vulnerability results in denial of service.


Update to version 2.5.12.

External links

Back to List