org.apache.struts:struts2-core vulnerabilities (TuxCare)

4 vulnerabilities.

• org.apache.struts:struts2-core TuxCare Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component CVE-2025-68493 Public exploitFix available EPSS 50.4% 8.1 HighJanuary 11, 2026
• org.apache.struts:struts2-core TuxCare Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) - version ranges fixed CVE-2025-66675 Fix available 8.2 HighDecember 10, 2025
• org.apache.struts:struts2-core TuxCare Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) CVE-2025-64775 Fix available 7.5 HighDecember 1, 2025
• org.apache.struts:struts2-core TuxCare Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks CVE-2024-53677 Public exploitFix available EPSS 72.4% 9.5 CriticalDecember 11, 2024