CVE-2023-34149

published 2023-06-14

CVE-2023-34149: Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.

Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	struts	< 2.5.31	2.5.31
apache	struts	>= 6.0.0 < 6.1.2.1	6.1.2.1
apache_software_foundation	apache_struts	<= 2.5.30	—

CWE-770