Apache Struts 安全漏洞

🗓️ 01 Dec 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 6 Views

Apache Struts file leak in multipart processing could exhaust disk space across versions 2.0.0–6.7.0 and 7.0.0–7.0.3.

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	9 Mar 202610:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI (CVE-2019-17570, CVE-2025-64775)	26 Feb 202603:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 24 (4.2.0.24)	9 Apr 202610:21	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-64775)	21 Jul 202618:10	–	ibm
Atlassian	DoS (Denial of Service) Apache Struts Dependency in Bamboo Data Center	11 Mar 202616:55	–	atlassian
Atlassian	DoS (Denial of Service) org.apache.struts:struts2-core Dependency in Crowd Data Center and Server	19 Dec 202519:27	–	atlassian
Tenable Nessus	Atlassian Bamboo 9.6.x < 9.6.24 / 10.x < 10.2.16 / 11.x / 12.x < 12.1.3 Multiple Vulnerabilities	25 Mar 202600:00	–	nessus
Tenable Nessus	Apache Struts 2.0.0 <= 6.7.0 / 7.0.0 <= 7.0.3 Denial of Service (S2-068)	4 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-64775	3 Dec 202500:00	–	nessus
BDU FSTEC	The vulnerability of the Apache Struts software platform, related to incomplete cleanup of temporary or auxiliary resources, allows attackers to cause service failures.	9 Dec 202500:00	–	bdu_fstec

Source	Link
cwiki	www.cwiki.apache.org/confluence/display/WW/S2-068
openwall	www.openwall.com/lists/oss-security/2025/12/01/2
access	www.access.redhat.com/security/cve/cve-2025-64775
vigilance	www.vigilance.fr/vulnerability/Apache-Struts-overload-via-Multipart-Request-48918
oracle	www.oracle.com/security-alerts/cpuapr2026.html

28 May 2026 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

EPSS0.01486

SSVC

Apache Struts file leak multipart processing disk exhaustion vulnerable versions