CVE-2006-1547

CVE-2006-1547 is a denial-of-service vulnerability affecting Apache Struts versions prior to 1.2.9 when used with BeanUtils 1.7. Remote attackers can exploit this by crafting a multipart/form-data request that references a specific method, leading to resource exhaustion. This vulnerability carries a high CVSS score of 7.5 due to its network-based attack vector, low complexity, and potential for high availability impact. It is actively exploited, listed in CISA's KEV catalog, and has garnered significant community discussion, despite a lack of public exploit code on platforms like Metasploit or ExploitDB.