CVE-2017-9787
En bref Sévérité Non disponible EPSS EPSS 10.55 % · centile 96 (2026-10-27) État PUBLISHED Publiée 2017-07-13 Mise à jour 2024-09-17 Attribuée par apache Statut NVD Modified Description When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.
Scores Version Score Vecteur Évalué par CVSS 3.0 HIGH 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Avis
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*+13 autres Produits affectés
Références
Sources
