Lucene search
RedhatCVELIST:CVE-2012-4386HistorySep 05, 2012 - 11:00 p.m.
CVE-2012-4386
2012-09-0523:00:00
redhat
raw.githubusercontent.com
1
The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.
Related
github
github
Cross-Site Request Forgery in Apache Struts
2022-05-17 01:42:17
cve
cve
CVE-2012-4386
2012-09-05 23:55:02
ubuntucve
ubuntucve
CVE-2012-4386
2012-09-05 00:00:00
prion
prion
Cross site request forgery (csrf)
2012-09-05 23:55:00
osv
osv
Cross-Site Request Forgery in Apache Struts
2022-05-17 01:42:17
openvas
openvas
Apache Struts Security Update (S2-010, S2-011)
2021-09-14 00:00:00
nessus
nessus
Apache Struts 2.x < 2.3.4.1 Multiple Vulnerabilities (S2-010) (S2-011)
2018-09-11 00:00:00
