CVE-2023-34396

Summary

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.

Upgrade to Struts 2.5.31 or 6.1.2.1 or greater

Affected Software

Weaknesses

• CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling

ADP Enrichment

CVE Program Container

Additional References

• https://cwiki.apache.org/confluence/display/WW/S2-064
• http://www.openwall.com/lists/oss-security/2023/06/14/3
• https://security.netapp.com/advisory/ntap-20230706-0005/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://cwiki.apache.org/confluence/display/WW/S2-064
• http://www.openwall.com/lists/oss-security/2023/06/14/3
• https://security.netapp.com/advisory/ntap-20230706-0005/

• ←Previous
• Next→