Lucene search

K
cvelistMitreCVELIST:CVE-2008-6505
HistoryMar 23, 2009 - 2:00 p.m.

CVE-2008-6505

2009-03-2314:00:00
mitre
www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.966 High

EPSS

Percentile

99.6%

Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a …%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0.x and (2) DefaultStaticContentLoader in 2.1.x.

6.7 Medium

AI Score

Confidence

Low

0.966 High

EPSS

Percentile

99.6%