CVE-2017-15707

Fixed upstream EPSS 5%

In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.

Published 2017-12-01 · CVE record · OSV

Products: Apache Software Foundation Apache Struts

Fixed upstream