Struts2 JSON Plugin

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 29, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

JSON array proof of concept shows parser resource exhaustion

The authors say Apache Struts2 JSON Plugin changes through S2-072 still do not stop maximised comma-array consumption.

Full DisclosureOct 29, 04:11 UTC · 1d agoResearch 2 sources1

Apache Struts2 JSON plugin insecure deserialization report continues

Daniel Owens cites earlier Struts2 JSON denial-of-service write-ups and a naïve proof-of-concept script; this excerpt ends before new details.

Full DisclosureOct 29, 04:11 UTC · 1d agoVulnerability 2 sources1

Appears with

Apachevendor · 2

Entities are extracted by the model from each article. First seen Oct 29, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.