Description
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.
Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Struts | ≤ 2.5.30, ≤ 6.1.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.struts:struts2-core | < 2.5.31 | 2.5.31 | GHSA-8f6x-v685-g2xc |
| Maven | org.apache.struts:struts2-core | >= 6.0.0, < 6.1.2.1 | 6.1.2.1 | GHSA-8f6x-v685-g2xc |
Advisories 2
- WID-SEC-2023-2625 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 6, 2025
- WID-SEC-2023-1455 Apache Struts: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jun 25, 2024