The Apache Struts REST Plugin is vulnerable to DoS attack via XStream library. Upgrade to version 2.5.16 and switch to Jackson XML handler or implement custom XML handler
Reporter | Title | Published | Views | Family All 18 |
---|---|---|---|---|
![]() | CVE-2018-1327 | 27 Mar 201821:29 | – | osv |
![]() | Apache Struts REST Plugin can potentially allow a DoS attack | 16 Oct 201819:35 | – | osv |
![]() | CVE-2018-1327 | 27 Mar 201800:00 | – | ubuntucve |
![]() | Security Bulletin: Public disclosed vulnerability from Apache Struts affects IBM Spectrum LSF Explorer | 18 Jun 201801:42 | – | ibm |
![]() | Security Bulletin: Public disclosed vulnerability from Apache Struts affects IBM Platform Application Center. | 18 Jun 201801:42 | – | ibm |
![]() | Security Bulletin: IBM Security Guardium is affected by a Public disclosed vulnerability from Apache Struts vulnerability | 28 Sep 201814:10 | – | ibm |
![]() | K65065347 : Apache Struts vulnerability CVE-2018-1327 | 11 Apr 201800:00 | – | f5 |
![]() | Design/Logic Flaw | 27 Mar 201821:29 | – | prion |
![]() | Apache Struts Security Update (S2-056) | 2 Apr 201800:00 | – | openvas |
![]() | Apache Struts2 S2-056(CVE-2018-1327) | 27 Mar 201800:00 | – | seebug |
Source | Link |
---|---|
cwiki | www.cwiki.apache.org/confluence/display/WW/S2-056 |
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo