Description
An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Apache Struts | Apache Struts 2.0.0 to 2.5.20 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.struts:struts2-core | >= 2.0.0, < 2.5.22 | 2.5.22 | GHSA-ccp5-gg58-pxfm |