Lucene search
Veracode Vulnerability DatabaseVERACODE:3079HistoryDec 05, 2016 - 3:35 a.m.
Denial Of Service (DoS) Via URLValidator
2016-12-0503:35:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.008 Low
EPSS
Percentile
81.4%
Apache struts2 is vulnerable to denial-of-service (DoS) attacks. It does not trim when validating input URL in form files. If built-in URLValidator is used, it is possible for attackers to prepare a special URL which will be used to overload server process when performing validation of the URL, causing DoS attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| struts 2 core | le | 2.5-BETA3 | |
| struts 2 core | le | 2.5.5 |
References
Related
nessus
nessus
cve
cve
CVE-2016-8738
2017-09-20 17:29:00
openvas
openvas
Apache Struts DoS Vulnerability (S2-044) - Linux
2017-09-28 00:00:00
Apache Struts Security Update (S2-044)
2017-09-28 00:00:00
prion
prion
Design/Logic Flaw
2017-09-20 17:29:00
ubuntucve
ubuntucve
CVE-2016-8738
2017-09-20 00:00:00
cvelist
cvelist
CVE-2016-8738
2016-12-19 00:00:00
nvd
nvd
CVE-2016-8738
2017-09-20 17:29:00
osv
osv
CVE-2016-8738
2017-09-20 17:29:00
Apache Struts vulnerable to possible DoS attack when using URLValidator
2022-05-14 03:15:07
github
github
Apache Struts vulnerable to possible DoS attack when using URLValidator
2022-05-14 03:15:07
f5
f5
K74571223 : Apache Struts vulnerability CVE-2016-8738
2017-02-24 00:00:00