description: The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload.
problem types: A remote attacker may create a DoS attack by sending crafted xml request when using the Struts REST plugin
affected:
{
product: Apache Struts
vendor: Apache Software Foundation
versions:
status: affected, version: 2.3.7 - 2.3.33
status: affected, version: 2.5 - 2.5.12
status: affected, version: 2.1.x series
}