CVE-2017-9793
Fixed upstream EPSS 9%
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload.
Products: Apache Software Foundation Apache Struts
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.struts:struts2-rest-plugin | 2.3.34 |
| Maven | org.apache.struts:struts2-rest-plugin | 2.5.13 |