diff --git a/advisories/github-reviewed/2022/05/GHSA-xg75-68x3-7p3q/GHSA-xg75-68x3-7p3q.json b/advisories/github-reviewed/2022/05/GHSA-xg75-68x3-7p3q/GHSA-xg75-68x3-7p3q.json index 5fab25773ed..faf93c85a69 100644 --- a/advisories/github-reviewed/2022/05/GHSA-xg75-68x3-7p3q/GHSA-xg75-68x3-7p3q.json +++ b/advisories/github-reviewed/2022/05/GHSA-xg75-68x3-7p3q/GHSA-xg75-68x3-7p3q.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-xg75-68x3-7p3q", - "modified": "2022-11-03T22:48:20Z", + "modified": "2024-01-04T20:22:25Z", "published": "2022-05-17T02:16:00Z", "aliases": [ "CVE-2016-4465" ], - "summary": "Possible DoS attack when using URLValidator", - "details": "The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.", + "summary": "Apache Struts vulnerable to possible DoS attack when using URLValidator", + "details": "The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.13 allows remote attackers to cause a denial of service via a null value for a URL field.", "severity": [ { "type": "CVSS_V3", @@ -59,10 +59,22 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4465" }, + { + "type": "WEB", + "url": "https://github.com/apache/struts/commit/a0fdca138feec2c2e94eb75ca1f8b76678b4d152" + }, + { + "type": "WEB", + "url": "https://github.com/apache/struts/commit/eccc31ebce5430f9e91b9684c63eaaf885e603f9" + }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1348253" }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/struts" + }, { "type": "WEB", "url": "https://struts.apache.org/docs/s2-041.html"