CVE-2017-7672

CVSS 3.0: 5.9 medium
EPSS: 10%p95
Published: Jul 13, 2017 · Jul 13, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-7672 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.

Vendors: apache

Products: struts

Weakness: CWE-20

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (9.8%)

In the news

1 story

Oracle releases security patches for Apache Struts CVE-2017

Security AffairsSep 26, 06:34 UTC · Sep 26, 2017VulnerabilityExploitedCVE-2017-9805 CVE-2017-7672 CVE-2017-9787+52 · 1 read