{"action":"Upgrade org.apache.struts:struts2-core to 2.5.13 or later.","affected":[{"fixed":"2.5.13","introduced":"2.5.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2016-8738"],"ecosystem":"Maven","epss":0.03259,"exploited":false,"fixed_versions":["2.5.13"],"ghsa_id":"GHSA-86vq-8qhc-5rqw","id":"tcs_01M5N8M39040DAP1MKZN66Y0M7","modified_at":"2024-02-19T05:37:33.721455Z","published_at":"2022-05-14T03:15:07Z","references":["https://osv.dev/vulnerability/GHSA-86vq-8qhc-5rqw","https://nvd.nist.gov/vuln/detail/CVE-2016-8738","https://github.com/apache/struts/commit/554b9dddb0fbd1e581ef577dd62a7c22955ad0f6","https://github.com/apache/struts","https://security.netapp.com/advisory/ntap-20180629-0003","https://struts.apache.org/docs/s2-044.html"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-86vq-8qhc-5rqw","url":"https://osv.dev/vulnerability/GHSA-86vq-8qhc-5rqw"}],"summary":"Apache Struts vulnerable to possible DoS attack when using URLValidator"}