CVE-2017-7672

2017-08-11T13:48:28
ID RH:CVE-2017-7672
Type redhatcve
Reporter redhat.com
Modified 2020-08-18T13:56:06

Description

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.