Security Alert (A23-09-16): Vulnerability in Apache Struts


 

Published on: 20 September 2023

  
  

Description:

The Apache Software Foundation has released the security bulletins to address the vulnerability in Apache Struts. A remote attacker could exploit the vulnerability by sending a specially crafted request to the affected systems.

 

Affected Systems:

  • Apache Struts 2.x prior to version 2.5.32
  • Apache Struts 6.1.x prior to version 6.1.2.2
  • Apache Struts 6.3.x prior to version 6.3.0.1

 

Impact:

Successful exploitation of the vulnerability could lead to denial of service on an affected system.

 

Recommendation:

Administrators of the affected systems should upgrade the Apache Struts to current versions 2.5.32, 6.1.2.2 or 6.3.0.1 to address the issue. The updates are available at: 
https://struts.apache.org/download.cgi

 

More Information:

  • https://struts.apache.org/announce-2023.html#a20230913-1
  • https://struts.apache.org/announce-2023.html#a20230913-2
  • https://struts.apache.org/announce-2023.html#a20230913-3
  • https://cwiki.apache.org/confluence/display/WW/S2-065
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41835


Tag: Apache , Struts
Tags