Apache Struts 2 DoS Vulnerability Let Attackers Crash Server

Cybersecuritynews •Abinaya • December 12, 2025

A critical denial-of-service vulnerability has been discovered in Apache Struts 2, affecting multiple versions of the popular web application framework. The vulnerability, identified as CVE-2025-64775, exploits a file leak in multipart request processing that can cause disk exhaustion and server crashes. Organizations running affected versions should prioritize patching immediately to prevent potential service disruptions. The […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical DoS Vulnerability Found in Apache Struts 2 Framework A critical denial-of-service vulnerability, CVE-2025-64775, has been identified in Apache Struts 2, impacting multiple versions of the web application framework. This vulnerability exploits a file leak in multipart request processing, leading to potential disk exhaustion and server crashes. Organizations using affected versions are urged to prioritize patching to avoid service disruptions. 1 sources 30

Extracted Entities

Apache Struts 2 DoS Vulnerability Let Attackers Crash Server

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)