DoS (Denial of Service) org.apache.struts:struts2-core Dependency in Crowd Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2025-66675 was introduced in versions 7.0.2 and 7.1.0 of Crowd Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H allows an...

CVE-2025-66675

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.4, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue. It's related...

PT-2025-50605

Apache Struts 2 DoS Flaw CVE-2025-66675 Risks Server Crash via File Leak in Multipart Request Processing https://securityonline.info/apache-struts-2-dos-flaw-cve-2025-66775-risks-server-crash-via-file-leak-in-multipart-request-processing/...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (6.0.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (6.0.0) +53 more potentially affected by CVE-2025-66675 via org.apache.struts:struts2-core (>=7.0.0, <=7.0.3)

org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 and more Source cves: CVE-2025-66675 Source advisory: OSV:GHSA-RG58-XHH7-MQJW...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +332 more potentially affected by CVE-2025-66675 via org.apache.struts:struts2-core (>=2.0.5, <=6.7.4)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.9, =1.2, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2025-66675 Source advisory: MEND:CVE-2025-66675...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (6.0.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (6.0.0) +53 more potentially affected by CVE-2025-66675 via org.apache.struts:struts2-core (>=7.0.0, <=7.0.3)

org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 and more Source cves: CVE-2025-66675 Source advisory: MEND:CVE-2025-66675...

CVE-2025-66675

creationtimestamp| type| source ---|---|--- 2025-12-10 07:50:56+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3m7ml6tiug22r 2025-12-10 10:35:07+00:00| seen| https://gist.github.com/Darkcrai86/fb9eabf8cdc573fe548b344743733bb8 2025-12-10 11:18:47+00:00| seen|...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (6.0.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (6.0.0) +53 more potentially affected by CVE-2025-64775 +1 more via org.apache.struts:struts2-core (>=7.0.0, <=7.0.3)

org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 and more Source cves: CVE-2025-64775, CVE-2025-66675 Source advisory: SNYK:JAVA-ORGAPACHESTRUTS-14172798h...