Lucene search

K
osvGoogleOSV:CVE-2016-8738
HistorySep 20, 2017 - 5:29 p.m.

CVE-2016-8738

2017-09-2017:29:00
Google
osv.dev
4

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

In Apache Struts 2.5 through 2.5.5, if an application allows entering a URL in a form field and the built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%