From e64a3c5523d5c734170d17ef31e7a1774ec87231 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 4 Jan 2024 21:34:14 +0000 Subject: [PATCH] Publish GHSA-86vq-8qhc-5rqw --- .../05/GHSA-86vq-8qhc-5rqw/GHSA-86vq-8qhc-5rqw.json | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2022/05/GHSA-86vq-8qhc-5rqw/GHSA-86vq-8qhc-5rqw.json b/advisories/github-reviewed/2022/05/GHSA-86vq-8qhc-5rqw/GHSA-86vq-8qhc-5rqw.json index f94617e32e7..2ab693cf2be 100644 --- a/advisories/github-reviewed/2022/05/GHSA-86vq-8qhc-5rqw/GHSA-86vq-8qhc-5rqw.json +++ b/advisories/github-reviewed/2022/05/GHSA-86vq-8qhc-5rqw/GHSA-86vq-8qhc-5rqw.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-86vq-8qhc-5rqw", - "modified": "2022-11-03T22:42:43Z", + "modified": "2024-01-04T21:32:56Z", "published": "2022-05-14T03:15:07Z", "aliases": [ "CVE-2016-8738" ], - "summary": "Possible DoS attack when using URLValidator", + "summary": "Apache Struts vulnerable to possible DoS attack when using URLValidator", "details": "If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.", "severity": [ { @@ -40,6 +40,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8738" }, + { + "type": "WEB", + "url": "https://github.com/apache/struts/commit/554b9dddb0fbd1e581ef577dd62a7c22955ad0f6" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/struts" + }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20180629-0003/"