发布时间: 2023年6月26日
修改时间: 2023年6月26日
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.Upgrade to Struts 2.5.31 or 6.1.2.1 or greater
NVD | openEuler | |
---|---|---|
CVSS评分 | 7.5 | 7.5 |
Attack Vector | Network | Network |
Attack Complexity | Low | Low |
Privileges Required | None | None |
User Interaction | None | None |
Scope | Unchanged | Unchanged |
Confidentiality | None | None |
Integrity | None | None |
Availability | High | High |
公告名 | 概要 | 发布时间 |
---|---|---|
KylinSec-SA-2023-1465 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2.Upgrade to Struts 2.5.31 or 6.1.2.1 or greater | 2023年6月26日 |
产品 | 包 | 状态 |
---|---|---|
KY3.4-4A | struts | Unaffected |
KY3.4-5A | struts | Unaffected |
KY3.5.1 | struts | Unaffected |
KY3.5.2 | struts | Unaffected |