Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

GHSA-8MR5-H28G-36QX Spring AOP functionality (Struts) vulnerable to DoS attack

🗓️ 16 Oct 2018 19:37:07Reported by GoogleType 
osv
 osv🔗 osv.dev👁 4 Views

Spring AOP used to secure Struts actions allows a denial of service; upgrade Apache Struts to 2.5.12 or 2.3.33.

Related
Refs
ReporterTitlePublishedViews
Family
cnvd
CNVD		Apache Struts Denial of Service Vulnerability (CNVD-2017-23347)
14 Jul 201700:00
–cnvd
cve
CVE		CVE-2017-9787
13 Jul 201715:00
–cve
cvelist
Cvelist		CVE-2017-9787
13 Jul 201715:00
–cvelist
ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in Apache Struts 2 affects IBM Spectrum Conductor with Spark (CVE-2017-9787, CVE-2017-9804, and CVE-2017-12611)
18 Jun 201801:38
–ibm
f5
F5 Networks		K86300800: Apache Struts 2 vulnerability CVE-2017-9787
21 Feb 202318:34
–f5
github
Github Security Blog		Spring AOP functionality (Struts) vulnerable to DoS attack
16 Oct 201819:37
–github
nessus
Tenable Nessus		MySQL Enterprise Monitor 3.2.x < 3.2.9.2249 / 3.3.x < 3.3.5.3292 / 3.4.x < 3.4.3.4225 Multiple Vulnerabilities (October 2017 CPU)
28 Sep 201700:00
–nessus
nessus
Tenable Nessus		Oracle WebLogic Server Multiple Vulnerabilities
4 Oct 201700:00
–nessus
nessus
Tenable Nessus		Apache Struts 2.3.x < 2.3.33 Denial of Service (S2-049)
5 Nov 201800:00
–nessus
nessus
Tenable Nessus		Apache Struts 2.5.x < 2.5.12 Multiple DoS (S2-047) (S2-049)
14 Jul 201700:00
–nessus
Rows per page
SourceLink
nvdwww.nvd.nist.gov/vuln/detail/CVE-2017-9787
githubwww.github.com/apache/struts/commit/086b63735527d4bb0c1dd0d86a7c0374b825ff2
githubwww.github.com/apache/struts/commit/0d6442bab5b44d93c4c2e63c5335f0a331333b9
listswww.lists.apache.org/thread.html/3795c4dd46d9ec75f4a6eb9eca11c11edd3e796c6c1fd7b17b5dc50d@%3Cannouncements.struts.apache.org%3E
listswww.lists.apache.org/thread.html/de3d325f0433cd3b42258b6a302c0d7a72b69eedc1480ed561d3b065@%3Cannouncements.struts.apache.org%3E
securitywww.security.netapp.com/advisory/ntap-20180706-0002
webwww.web.archive.org/web/20170910013819/http://www.securitytracker.com/id/1039115
webwww.web.archive.org/web/20200227144723/http://www.securityfocus.com/bid/99562
strutswww.struts.apache.org/docs/s2-049.html
oraclewww.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Dec 2024 05:41Current
7.2High risk
Vulners AI Score7.2
CVSS 37.5
EPSS0.10554
Spring AOPStruts actionsDenial of serviceUpgrade StrutsVersion 2.5.12Apache Struts
4