{"action":"Upgrade org.apache.struts:struts2-core to 2.3.29 (2.3.x) or 2.5.13 (2.5.x) or later.","affected":[{"fixed":"2.3.29","introduced":"2.3.20"},{"fixed":"2.5.13","introduced":"2.5.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2016-4465"],"ecosystem":"Maven","epss":0.10365,"exploited":false,"fixed_versions":["2.3.29","2.5.13"],"ghsa_id":"GHSA-xg75-68x3-7p3q","id":"tcs_01M5N9J91AH0EWRXQ4GBBH195V","modified_at":"2024-02-16T08:09:14.212983Z","published_at":"2022-05-17T02:16:00Z","references":["https://osv.dev/vulnerability/GHSA-xg75-68x3-7p3q","https://nvd.nist.gov/vuln/detail/CVE-2016-4465","https://github.com/apache/struts/commit/a0fdca138feec2c2e94eb75ca1f8b76678b4d152","https://github.com/apache/struts/commit/eccc31ebce5430f9e91b9684c63eaaf885e603f9","https://bugzilla.redhat.com/show_bug.cgi?id=1348253","https://github.com/apache/struts","https://struts.apache.org/docs/s2-041.html","http://jvn.jp/en/jp/JVN12352818/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2016-000114","http://www-01.ibm.com/support/docview.wss?uid=swg21987854"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xg75-68x3-7p3q","url":"https://osv.dev/vulnerability/GHSA-xg75-68x3-7p3q"}],"summary":"Apache Struts vulnerable to possible DoS attack when using URLValidator"}