A vulnerability identified as problematic has been detected in Apache Struts up to 2.3.37/2.5.33/6.1.0. This affects an unknown function of the component SAXParserFactory. This manipulation causes xml external entity reference.
This vulnerability is tracked as CVE-2025-68493. The attack is possible to be carried out remotely. No exploit exists.
You should upgrade the affected component.
