{"action":"Upgrade org.apache.struts:struts2-core to 2.5.31 (2.x) or 6.1.2.1 (6.x) or later.","affected":[{"fixed":"2.5.31","introduced":"0"},{"fixed":"6.1.2.1","introduced":"6.0.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2023-34149"],"ecosystem":"Maven","epss":0.05448,"exploited":false,"fixed_versions":["2.5.31","6.1.2.1"],"ghsa_id":"GHSA-8f6x-v685-g2xc","id":"tcs_01M5N8MJEZ1M5BESZT5GTJSRM4","modified_at":"2025-02-13T19:13:34.551806Z","published_at":"2023-06-14T09:30:42Z","references":["https://osv.dev/vulnerability/GHSA-8f6x-v685-g2xc","https://nvd.nist.gov/vuln/detail/CVE-2023-34149","https://github.com/apache/struts/commit/2d6f1bc0a6f5ac575a56784ac6461816b67c4f21","https://cwiki.apache.org/confluence/display/WW/S2-063","https://github.com/apache/struts","https://github.com/apache/struts/releases/tag/STRUTS_2_5_31","https://github.com/apache/struts/releases/tag/STRUTS_6_1_2_1","https://security.netapp.com/advisory/ntap-20230706-0005","http://www.openwall.com/lists/oss-security/2023/06/14/2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8f6x-v685-g2xc","url":"https://osv.dev/vulnerability/GHSA-8f6x-v685-g2xc"}],"summary":"Apache Struts vulnerable to memory exhaustion"}