{"action":"Upgrade org.apache.struts.xwork:xwork-core to 2.3.4.1 or later.","affected":[{"fixed":"2.3.4.1","introduced":"2.0.0"}],"component":"org.apache.struts.xwork:xwork-core","cve_ids":["CVE-2012-4387"],"ecosystem":"Maven","epss":0.08137,"exploited":false,"fixed_versions":["2.3.4.1"],"ghsa_id":"GHSA-hrgc-54mv-58gv","id":"tcs_01M5N9197NB1J7F35V6Z13TRW1","modified_at":"2024-12-06T05:37:55.009124Z","published_at":"2022-05-17T01:42:17Z","references":["https://osv.dev/vulnerability/GHSA-hrgc-54mv-58gv","https://nvd.nist.gov/vuln/detail/CVE-2012-4387","https://github.com/apache/struts/commit/80e03182d66d9e6ab18f9a9a9b3c42725a1c89e9","https://github.com/apache/struts/commit/87935af56a27235e9399308ee1fcfb74f8edcefa","https://exchange.xforce.ibmcloud.com/vulnerabilities/78183","https://github.com/apache/struts","https://issues.apache.org/jira/browse/WW-3860","http://struts.apache.org/2.x/docs/s2-011.html","http://www.openwall.com/lists/oss-security/2012/09/01/4","http://www.openwall.com/lists/oss-security/2012/09/01/5"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hrgc-54mv-58gv","url":"https://osv.dev/vulnerability/GHSA-hrgc-54mv-58gv"}],"summary":"Denial of service in Apache Struts"}