Denial Of Service (DoS)

🗓️ 15 Jun 2023 17:33:32Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

Struts 2 Core vulnerability, DoS attack, non-file form fields

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts 1.1 Vulnerabilities in IBM Library Support for Struts	16 Jan 202609:15	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Struts affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	7 Dec 202317:17	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts 1.3.10 Vulnerabilities in IBM Library Support for Struts	16 Jan 202609:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	24 Oct 202319:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Struts affect IBM Tivoli Application Dependency Discovery Manager. (CVE-2023-34396, CVE-2023-34149)	4 Jul 202313:04	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Struts Vulerability Affects IBM eDiscovery Manager (CVE-2023-34149, CVE-2023-34396)	12 Jul 202310:01	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	13 Mar 202617:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an Apache Struts vulnerability ( CVE-2023-34396)	19 Dec 202315:37	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2023-34396 may affect Apache Struts used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint.	4 Sep 202311:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Struts library affect Tivoli Netcool/OMNIbus WebGUI	16 Sep 202300:18	–	ibm

Vulners

Node

apache struts2-coreRange2.2.1–2.5.30java

apache struts2-coreRange6.0.0–6.1.2java

Source	Link
cwiki	www.cwiki.apache.org/confluence/display/WW/S2-064
github	www.github.com/apache/struts/commit/e58edfba83189fd17dcce94dc2be57a8b4e1571e
github	www.github.com/apache/struts/commit/2d6f1bc0a6f5ac575a56784ac6461816b67c4f21
github	www.github.com/advisories/GHSA-4g42-gqrg-4633
security	www.security.netapp.com/advisory/ntap-20230706-0005/
openwall	www.openwall.com/lists/oss-security/2023/06/14/3
openwall	www.openwall.com/lists/oss-security/2023/06/14/3

13 Feb 2025 19:35Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.14.3 - 7.5

EPSS0.00123

SSVC

struts 2 vulnerability denial of service multipart request application crash attacker