Lucene search
GitHub Advisory DatabaseGHSA-P3VW-FVWX-QCV5HistoryMay 01, 2022 - 6:50 a.m.
Cross-site scripting in Apache Struts
2022-05-0106:50:42
CWE-79
GitHub Advisory Database
github.com
14
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.015 Low
EPSS
Percentile
86.5%
Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.
| CPE | Name | Operator | Version |
|---|---|---|---|
| struts:struts | lt | 1.2.9 |
Related
osv
osv
Cross-site scripting in Apache Struts
2022-05-01 06:50:42
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-14 02:37:40
prion
prion
Cross site scripting
2006-03-30 22:02:00
ubuntucve
ubuntucve
CVE-2006-1548
2006-03-30 00:00:00
cve
cve
CVE-2006-1548
2006-03-30 22:02:00
redhat
redhat
(RHSA-2006:0281) struts security update for Red Hat Application Server
2006-05-03 00:00:00
openvas
openvas
Apache Struts Security Update (CVE-2006-1546, CVE-2006-1547, CVE-2006-1548)
2021-09-16 00:00:00
ibm
ibm
Security Bulletin: Multiple CVEs affect IBM Integration Designer
2023-02-01 19:40:57
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.015 Low
EPSS
Percentile
86.5%
Related for GHSA-P3VW-FVWX-QCV5