Skip to content
NewA calmer, faster ZeroHour

Apache Struts2 Spring Plugin opens Spring ApplicationContext outside try-with-resources

Original title: Apache Struts2 Spring Plugin Uses a Previously Closed Resource

Full Disclosure ()1 · 1 read
Part of a story covered by 4 sourcesMultiple Vulnerabilities in Apache Struts2 Core 7.4.0 and BelowMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The Spring Plugin in Apache Struts2 Core opens an ApplicationContext via try-with-resources but continues to use the closed resource, resulting in IllegalStateException.

The Apache Struts2 Spring Plugin opens a Spring ApplicationContext via a try-with-resources block and, outside of said block, then continues to use the closed resource, resulting in an uncaught IllegalStateException. This particular issue prevents proper functionality and indicates poor code quality and code review standards and processes, while not being, itself, otherwise excessively meaningful for a production environment.

Key facts
  • Opens ApplicationContext in try-with-resources
  • Uses the closed resource outside the block
  • Results in uncaught IllegalStateException
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

Posted by Daniel Owens via Fulldisclosure on Nov 01 Description The Apache Struts2 Spring Plugin opens a Spring `ApplicationContex` via a try-with-resources block and, outside of said block, then continues to use the closed resource, resulting in an uncaught `IllegalStateException`.

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.