CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.2. It affects Apache. It may lead to a denial-of-service condition.
CVE
CVE-2025-66675
Severity
HIGH
CVSS
8.2
EPSS
0.52%
Apache
Original NVD Description
Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.4, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue. It's related to https://cve.org/CVERecord?id=CVE-2025-64775 - this CVE addresses missing affected version 6.7.4
Related CVEs
Other vulnerabilities affecting the same vendor(s)