CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2006-03-30
Apache Struts 1.x Remote Denial of Service Vulnerability Analysis and Mitigation (CVE-2006-1547)
[Affected Scope] Apache Struts versions prior to 1.2.9 deployed with Commons BeanUtils 1.7
[Impact] Remote attackers can trigger a Denial of Service (DoS) state by exhausting server resources via specially crafted multipart/form-data requests
[Mitigation] Upgrade Apache Struts to version 1.2.9 or higher, or implement input validation filters to block malicious parameter names