CVE-2023-34149
Fixed upstream EPSS 5%CVSS 4.3
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.
Products: Apache Software Foundation Apache Struts
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.struts:struts2-core | 2.5.31 |
| Maven | org.apache.struts:struts2-core | 6.1.2.1 |