CVE-2023-41835 — Apache Struts: excessive disk usage
When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multipart.saveDir even if the request has…
Published: 2023-12-05 · CVSS: 7.5 · CVSS 3.1
When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multipart.saveDir even if the request has been denied. Users are recommended to upgrade to versions Struts 2.5.32 or 6.1.2.2 or Struts 6.3.0.1 or greater, which fixe this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7