vulnerability
Apache Struts: S2-063 (CVE-2023-34149): Security updates available for Apache Struts
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:N/A:P) | Jun 14, 2023 | Jun 14, 2023 | Aug 11, 2025 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
Jun 14, 2023
Added
Jun 14, 2023
Modified
Aug 11, 2025
Description
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.
Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.
Solutions
apache-struts-upgrade-2_5_31apache-struts-upgrade-6_1_2_1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.