PT-2017-19187

CVE-2017-9787

·

Published

2017-07-13

·

Updated

2019-10-03

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.5.12 Apache Struts versions prior to 2.3.33
Description The issue allows for a Denial of Service (DoS) attack when using Spring AOP functionality to secure Struts actions, even when a user is properly authenticated.
Recommendations For versions prior to 2.5.12, upgrade to Apache Struts version 2.5.12. For versions prior to 2.3.33, upgrade to Apache Struts version 2.3.33.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2017-9787
GHSA-8MR5-H28G-36QX
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com