Field Assessment
AI analysis pending.
CVE
CVE-2017-7672
Severity
MEDIUM
CVSS
5.9
EPSS
9.05%
Apache
Original Filing — NVD Description
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.