CVE-2023-34396
Fixed upstream EPSS 6%CVSS 4.3
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater
Products: Apache Software Foundation Apache Struts
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.struts:struts-core | no fix |
| Maven | org.apache.struts:struts2-core | 2.5.31 |
| Maven | org.apache.struts:struts2-core | 6.1.2.1 |
| Maven | struts:struts | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | hadoop-fips-3.3.6 | no fix |
| Chainguard | hadoop-fips-3.4.2 | no fix |
| Chainguard | hadoop-fips-3.5 | no fix |