CVE-2017-7672

2017-07-1300:00:00

apache

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.039 Low

EPSS

Percentile

92.0%

JSON

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.

CNA Affected

[
  {
    "product": "Apache Struts",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.5 to 2.5.10.1"
      }
    ]
  }
]