CVE-2017-7672

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload…

published July 13, 2017

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09835 · 95.6th percentile
Published
2017-07-13T15:00Z
EPSS history
Timeline
  • 13 JUL 15:00Z
    If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload…
    cvelistv5