Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2017-9793

CVSS 3.0
7.5 high
EPSS
9%p95
Published
·
Modified
Analyze CVE-2017-9793 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload.

Vendors
apache
Products
struts
Weakness
CWE-20
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news

2 stories