Description
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.
Upgrade to Struts 2.5.31 or 6.1.2.1 or greater
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Struts | ≤ 2.5.30, ≤ 6.1.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.struts:struts-core | <= 1.3.10 | — | GHSA-4g42-gqrg-4633 |
| Maven | org.apache.struts:struts2-core | < 2.5.31 | 2.5.31 | GHSA-4g42-gqrg-4633 |
| Maven | org.apache.struts:struts2-core | >= 6.0.0, < 6.1.2.1 | 6.1.2.1 | GHSA-4g42-gqrg-4633 |
| Maven | struts:struts | <= 1.2.9 | — | GHSA-4g42-gqrg-4633 |
Advisories 6
- WID-SEC-2023-2690 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 5, 2026
- WID-SEC-2023-2625 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 6, 2025
- WID-SEC-2023-1455 Apache Struts: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jun 25, 2024
- NCSC-2024-0231 Kwetsbaarheden verholpen in Atlassian producten NCSC-NL (Netherlands) · May 22, 2024
- WID-SEC-2023-2993 Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence and Atlassian Jira Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 12, 2023
- WID-SEC-2023-2679 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 17, 2023