Lucene search
+L

31 matches found

Github Security Blog
Github Security Blog
added 2018/10/16 7:37 p.m.42 views

Spring AOP functionality (Struts) vulnerable to DoS attack

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS4.1AI score0.10554EPSS
SaveExploits0References11Affected Software1
OSV
OSV
added 2018/10/16 7:37 p.m.4 views

GHSA-8MR5-H28G-36QX Spring AOP functionality (Struts) vulnerable to DoS attack

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS7.2AI score0.10554EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2017/08/11 1:48 p.m.47 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS3.9AI score0.10554EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/07/18 12:00 a.m.31 views

Apache Struts Spring AOP DoS Vulnerability (S2-049) - Linux

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack when user was properly authenticated. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

7.5CVSS7.5AI score0.10554EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/07/14 12:00 a.m.107 views

Apache Struts 2.5.x < 2.5.12 Multiple DoS (S2-047) (S2-049)

The version of Apache Struts running on the remote host is 2.5.x prior to 2.5.12. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when handling a specially crafted URL in a form field when the built-in URL validator is used. An unauthenticated,...

9.8CVSS7.7AI score0.33686EPSS
SaveExploits0References8
NVD
NVD
added 2017/07/13 3:29 p.m.34 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS7.4AI score0.10554EPSS
SaveExploits0References7
Prion
Prion
added 2017/07/13 3:29 p.m.33 views

Code injection

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

5CVSS6.8AI score0.99396EPSS
SaveExploits24References7Affected Software1
OSV
OSV
added 2017/07/13 3:29 p.m.47 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS8.2AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2017/07/13 3:29 p.m.35 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS7.1AI score0.10554EPSS
SaveExploits0References3
CVE
CVE
added 2017/07/13 3:00 p.m.134 views

CVE-2017-9787

CVE-2017-9805 affects the Apache Struts 2 REST plugin, where the REST Plugin uses an XStreamHandler with an unfiltered XStream instance, enabling remote code execution via crafted XML data. Affected are Struts 2.x releases containing REST plugin: 2.5.x prior to 2.5.13 and 2.3.x prior to 2.3.34 (p...

7.5CVSS7.4AI score0.10554EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2017/07/13 3:00 p.m.49 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5AI score0.10554EPSS
SaveExploits0References7
Rows per page
Query Builder