Description

In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.

Remediation

References

CVE-2017-15707

Related Vulnerabilities

WordPress Plugin Podlove Podcast Publisher Multiple Cross-Site Scripting Vulnerabilities (2.1.0)

WordPress Plugin WP Statistics Cross-Site Scripting (12.0.9)

WordPress Plugin Contact Bank-Contact Form Builder for WordPress Unspecified Vulnerability (2.1.26)

WordPress Plugin Audio Player Cross-Site Scripting (2.0.4.5)

WordPress 4.1.x Cross-Site Request Forgery (4.1 - 4.1.25)

Severity

Medium

Classification

CVE-2017-15707 CWE-20 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities