description: When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.
problem types: DoS Attack
affected:
{
product: Apache Struts
vendor: Apache Software Foundation
versions:
status: affected, version: 2.3.x prior to 2.3.33
status: affected, version: 2.5 to 2.5.10.1
}