Improper Input Validation in OpenSymphony XWork

🗓️ 17 May 2022 02:15:11Reported by GitHub Advisory DatabaseType

Improper Input Validation in OpenSymphony XWork ParametersIntercepto

Reporter	Title	Published	Views	Family All 13
Prion	Design/Logic Flaw	23 Mar 200914:19	–	prion
Prion	Design/Logic Flaw	17 Aug 201020:00	–	prion
CVE	CVE-2008-6504	23 Mar 200914:19	–	cve
CVE	CVE-2010-1870	17 Aug 201020:00	–	cve
NVD	CVE-2008-6504	23 Mar 200914:19	–	nvd
NVD	CVE-2010-1870	17 Aug 201020:00	–	nvd
OSV	Improper Input Validation in OpenSymphony XWork	17 May 202202:11	–	osv
Cvelist	CVE-2008-6504	23 Mar 200914:00	–	cvelist
Cvelist	CVE-2010-1870	17 Aug 201017:31	–	cvelist
Veracode	Unauthorized OGNL Execution	9 Nov 201805:25	–	veracode

Vulners

Node

com.opensymphony xworkRange2.1.0–2.1.2

com.opensymphony xworkRange<2.0.6

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-6504
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/46328
fisheye6	www.fisheye6.atlassian.com/cru/CR-9/
issues	www.issues.apache.org/struts/browse/WW-2692
jira	www.jira.opensymphony.com/browse/XW-641
secunia	www.secunia.com/advisories/32495
secunia	www.secunia.com/advisories/32497
struts	www.struts.apache.org/2.x/docs/s2-003.html
securityfocus	www.securityfocus.com/bid/32101
vupen	www.vupen.com/english/advisories/2008/3003

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo