Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-hpm1-euf1-vff1
Aliases:
CVE-2023-41835
GHSA-729q-fcgp-r5xh
|
Incomplete Cleanup
When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multipart.saveDir even if the request has been denied.
Users are recommended to upgrade to versions Struts 2.5.32 or 6.1.2.2 or Struts 6.3.0.1 or greater, which fixe this issue.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|