cve.bz

CVE-2017-9787

7.5 highEPSS 11%

High (7.5) in apache struts. EPSS 11% chance of exploitation in the next 30 days. Fixed in org.apache.struts:struts2-core 2.3.33, 2.5.12.

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.

Severity

CVSS 3.0

7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-8mr5-h28g-36qxMavenorg.apache.struts:struts2-core>=2.3.7 <2.3.332.3.33
GHSA-8mr5-h28g-36qxMavenorg.apache.struts:struts2-core>=2.5.0 <2.5.122.5.12

References

Check your stackJSON