CVE-2025-66675 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.…
High CVSS: 8.2

CVE-2025-66675

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.4, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

It's related to  https://cve.org/CVERecord?id=CVE-2025-64775  - this CVE addresses missing affected version 6.7.4
Vendor
Apache
Product
Struts
CWE
CWE-459
Yayın Tarihi
2025-12-10 10:16:02
Güncelleme
2025-12-16 18:39:51
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

Referanslar