CVE-2023-34149

MediumCVSS 4.3

Published: 14/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.40%

92th percentile - higher than 92% of all known CVEs

Summary

There is a vulnerability in Apache Struts related to resource allocation without limits or throttling. This issue affects Apache Struts versions up to 2.5.30 and 6.1.2.

Risk Assessment

Exploitation of this vulnerability may lead to excessive consumption of system resources, potentially impacting the availability of applications and services.

Recommendation

It is recommended to upgrade to Struts version 2.5.31 or 6.1.2.1 or greater to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater.