CVE-2017-9787
13.07.2017, 15:29
When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | struts | 2.3.7 |
| apache | struts | 2.3.8 |
| apache | struts | 2.3.9 |
| apache | struts | 2.3.10 |
| apache | struts | 2.3.11 |
| apache | struts | 2.3.12 |
| apache | struts | 2.3.13 |
| apache | struts | 2.3.14 |
| apache | struts | 2.3.14.1 |
| apache | struts | 2.3.14.2 |
| apache | struts | 2.3.14.3 |
| apache | struts | 2.3.15 |
| apache | struts | 2.3.15.1 |
| apache | struts | 2.3.15.2 |
| apache | struts | 2.3.15.3 |
| apache | struts | 2.3.16 |
| apache | struts | 2.3.16.1 |
| apache | struts | 2.3.16.2 |
| apache | struts | 2.3.16.3 |
| apache | struts | 2.3.17 |
| apache | struts | 2.3.19 |
| apache | struts | 2.3.20 |
| apache | struts | 2.3.20.1 |
| apache | struts | 2.3.20.2 |
| apache | struts | 2.3.20.3 |
| apache | struts | 2.3.21 |
| apache | struts | 2.3.22 |
| apache | struts | 2.3.23 |
| apache | struts | 2.3.24 |
| apache | struts | 2.3.24.1 |
| apache | struts | 2.3.24.2 |
| apache | struts | 2.3.24.3 |
| apache | struts | 2.3.25 |
| apache | struts | 2.3.26 |
| apache | struts | 2.3.27 |
| apache | struts | 2.3.28 |
| apache | struts | 2.3.28.1 |
| apache | struts | 2.3.29 |
| apache | struts | 2.3.30 |
| apache | struts | 2.3.31 |
| apache | struts | 2.3.32 |
| apache | struts | 2.5 |
| apache | struts | 2.5.1 |
| apache | struts | 2.5.2 |
| apache | struts | 2.5.3 |
| apache | struts | 2.5.4 |
| apache | struts | 2.5.5 |
| apache | struts | 2.5.6 |
| apache | struts | 2.5.7 |
| apache | struts | 2.5.8 |
| apache | struts | 2.5.9 |
| apache | struts | 2.5.10 |
| apache | struts | 2.5.10.1 |
𝑥
= Vulnerable software versions
References