| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.struts:struts2-core | ≥ 2.5.0, < 2.5.13 | 2.5.13 |
| struts | = 2.5= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5 |
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free