Lucene search

ChromeCVELIST:CVE-2011-3923

HistoryNov 01, 2019 - 1:57 p.m.

CVE-2011-3923

2019-11-0113:57:37

Chrome

www.cve.org

9.7 High

AI Score

Confidence

High

0.952 High

EPSS

Percentile

99.3%

JSON

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

CNA Affected

[
  {
    "product": "Struts",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.1.2"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2014/Jul/38

www.exploit-db.com/exploits/24874

www.securityfocus.com/bid/51628

www.securitytracker.com/id?1026575

bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3923

exchange.xforce.ibmcloud.com/vulnerabilities/72585

security-tracker.debian.org/tracker/CVE-2011-3923