Lucene search

Apache Struts2 Broken Access Control Vulnerability

🗓️ 17 May 2022 04:52:44Reported by GitHub Advisory DatabaseType

Apache Struts2 action mapping prefix vulnerability fixed in version 2.3.15.

Reporter	Title	Published	Views	Family All 20
OSV	Apache Struts2 Broken Access Control Vulnerability	17 May 202204:44	–	osv
NVD	CVE-2013-4310	30 Sep 201321:55	–	nvd
UbuntuCve	CVE-2013-4310	30 Sep 201300:00	–	ubuntucve
Cvelist	CVE-2013-4310	30 Sep 201321:00	–	cvelist
OpenVAS	Apache Struts Security Update (S2-018)	14 Sep 202100:00	–	openvas
Prion	Design/Logic Flaw	30 Sep 201321:55	–	prion
CVE	CVE-2013-4310	30 Sep 201321:55	–	cve
seebug.org	Apache Struts 安全措施绕过漏洞	26 Sep 201300:00	–	seebug
Tenable Nessus	Apache Struts 2.x < 2.3.15.3 Broken Access Control Vulnerability (S2-018)	10 Sep 201800:00	–	nessus
Tenable Nessus	Apache Struts 2 'action:' Parameter Prefix Security Constraint Bypass	27 Sep 201300:00	–	nessus

Vulners

Node

org.apache.struts struts2-coreRange<2.3.15.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-4310
struts	www.struts.apache.org/release/2.3.x/docs/s2-018.html
github	www.github.com/apache/struts/commit/0c8366cb792227d484b9ca13e537037dd0cb57dc
github	www.github.com/advisories/GHSA-q5q8-jghf-3pm3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2022 04:44Current

7.8High risk

Vulners AI Score7.8

CVSS25.8

EPSS0.025

CWE-284