Denial of Service (DoS) The advisory has been revoked - it doesn't affect any version of package org.apache.struts:struts2-core  (opens in a new tab)


Threat Intelligence

EPSS
10.37% (96th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-JAVA-ORGAPACHESTRUTS-30777
  • published20 Jun 2016
  • disclosed20 Jun 2016
  • creditUnknown

Introduced: 20 Jun 2016

CVE-2016-4465  (opens in a new tab)
CWE-20  (opens in a new tab)

Amendment

This was deemed not a vulnerability.

Overview

org.apache.struts:struts2-core is a popular open-source framework for developing web applications in the Java programming language.

Affected versions of this package are vulnerable to Denial of Service (DoS).

Details

<>

References