Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-64775

Опубликовано: 01 дек. 2025
Источник: redhat
CVSS3: 5.3

Описание

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

A denial of service vulnerability has been discovered in Apache Struts. A file leak in multipart request processing causes disk exhaustion when exploited.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 8javapackages-tools:201801/google-guiceNot affected
Red Hat Fuse 7struts2-coreWill not fix
Red Hat JBoss Enterprise Application Platform 8struts2-coreNot affected
Red Hat JBoss Enterprise Application Platform Expansion Packstruts2-coreNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-459
https://bugzilla.redhat.com/show_bug.cgi?id=2418059org.apache.struts/struts2-core: Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS)

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
8 месяцев назад

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

CVSS3: 7.5
nvd
8 месяцев назад

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

CVSS3: 7.5
debian
8 месяцев назад

Denial of Service vulnerability in Apache Struts, file leak in multipa ...

CVSS3: 7.5
github
8 месяцев назад

Apache Struts is Vulnerable to DoS via File Leak

CVSS3: 7.5
fstec
9 месяцев назад

Уязвимость программной платформы Apache Struts, связанная с неполной очисткой временных или вспомогательных ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

5.3 Medium

CVSS3