In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Struts | — | Upgrade to Apache Struts version 2.5.14.1 | Jan 19, 2018 | Dec 1, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub