A vulnerability labeled as problematic has been found in Apache Struts up to 6.7.0/7.0.3. This affects an unknown part of the component Multipart Request Handler. Such manipulation leads to incomplete cleanup.

This vulnerability is documented as CVE-2025-64775. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.