Apache Struts Denial of Service Vulnerability Allows Disk Exhaustion Attacks (CVE-2025-64775)
The Apache Software Foundation disclosed a denial of service vulnerability in Apache Struts on December 1, 2025 (updated December 10). The flaw (CVE-2025-64775 and related CVE-2025-66675) allows attackers to exhaust…