vulnerability
Apache Struts: S2-063 (CVE-2023-34149): Security updates available for Apache Struts
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:N/I:N/A:C) | Jun 14, 2023 | Jun 14, 2023 | Feb 20, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
Published
Jun 14, 2023
Added
Jun 14, 2023
Modified
Feb 20, 2025
Description
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.
Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.
Solution(s)
apache-struts-upgrade-2_5_31apache-struts-upgrade-6_1_2_1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.