- Vendor / Project
- Apache
- Product
- Struts 1
- Date added
- Jan 21, 2022
- Due date
- Jul 21, 2022
- Known ransomware use
- Unknown
- CWEs
- —
Description
ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).
Required action
Apply updates per vendor instructions.