CVE-2023-34396

MediumCVSS 4.3

Published: 14/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.47%

92th percentile - higher than 92% of all known CVEs

Summary

A vulnerability in Apache Struts related to resource allocation without limits or throttling. Affects Apache Struts versions up to 2.5.30 and 6.1.2.

Risk Assessment

Exploitation of this vulnerability may lead to excessive consumption of system resources, potentially impacting application availability.

Recommendation

It is recommended to upgrade to Struts version 2.5.31 or 6.1.2.1 or greater.

Original NVD description (English source)

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater