CVE

CVE-2006-1547

Apache Struts 1 ActionForm Denial-of-Service Vulnerability

Apache · Struts 1

Date added (CISA)

2022-01-21

Remediation due

2022-07-21

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).