Description
In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.
Remediation
References
Related Vulnerabilities
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2026-1285)
WordPress Plugin MX Time Zone Clocks Cross-Site Scripting (3.4)
WordPress Plugin Mini Mail Dashboard Widget 'abspath' Parameter Remote File Include (1.36)
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26116)
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-2064)