Security Advisory

CVE-2017-7672

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-07-13 15:00:00
Last updated 2024-09-17 01:41:33
Assigner apache
CVSS score not scored
State PUBLISHED

Description

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.