Apache Struts Denial of Service Vulnerability

Last Update Date: 29 Mar 2018 10:17 Release Date: 29 Mar 2018 4722 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

A vulnerability was identified in Apache Struts, a remote user can exploit this vulnerability to trigger Denial of Service condition on the targeted system.

Impact

Denial of Service

System / Technologies affected

Struts 2.1.1 - Struts 2.5.14.1

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Upgrade to version Struts 2.5.16.

Vulnerability Identifier

CVE-2018-1327

Source

AusCERT