S2-064: CVE-2023-34396: Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms

2023-06-14 Thread Yasser Zamani
Affected versions: - Apache Struts through 2.5.30 - Apache Struts through 6.1.2 Description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Credit: Matthew McClain

not detecting hidden parameters in multipart forms

2006-01-04 Thread Mon Cab
I am using hidden fields and multipart forms in a jsp, and it seems that the tag is not detecting the hidden field as being present when the multipart form is submitted. In MyJsp I have Myvar is present etc I

Re: Multipart forms

2004-07-20 Thread Diego
-- >From: "Diego" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Tuesday, July 20, 2004 8:26 AM >Subject: Re: Multipart forms > Thanks for your answer Niall. If I can't get the parameters in the reset() > method, then I don't know how to sol

Re: Multipart forms

2004-07-20 Thread Niall Pemberton
ECTED]> Sent: Tuesday, July 20, 2004 8:26 AM Subject: Re: Multipart forms > Thanks for your answer Niall. If I can't get the parameters in the reset() > method, then I don't know how to solve my problem. My ActionForm is on session > and it's a wizard-like one. The jsp

Re: Multipart forms

2004-07-20 Thread Diego
Thanks for your answer Niall. If I can't get the parameters in the reset() method, then I don't know how to solve my problem. My ActionForm is on session and it's a wizard-like one. The jsp has tabs to go to any page at any time. What I do with non-multipart forms is something l

Re: Multipart forms

2004-07-19 Thread Niall Pemberton
he first chance you get to do anything is in the form's validate method. Niall - Original Message - From: "Diego" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 19, 2004 3:26 PM Subject: Fwd: Multipart forms > Hi! I have a problem when I want

Fwd: Multipart forms

2004-07-19 Thread Diego
Hi! I have a problem when I want to get some parameters in the reset() method of an ActionForm. If the form is a "normal" form, then I simply call request.getParameter("myparameter") and the parameter is retrieved with no problem. But if the form is of type multipart, then I always get null. The