Lucene search

Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used

🗓️ 16 Oct 2018 19:33:37Reported by GitHub Advisory DatabaseType

Apache Struts form field URLValidator vulnerabilit

Reporter	Title	Published	Views	Family All 34
RedhatCVE	CVE-2017-9804	5 Sep 201714:19	–	redhatcve
RedhatCVE	CVE-2017-7672	11 Aug 201713:48	–	redhatcve
CVE	CVE-2017-9804	20 Sep 201717:29	–	cve
CVE	CVE-2017-7672	13 Jul 201715:29	–	cve
NVD	CVE-2017-9804	20 Sep 201717:29	–	nvd
NVD	CVE-2017-7672	13 Jul 201715:29	–	nvd
Veracode	Regular Expression Denial Of Service (ReDoS)	5 Sep 201721:13	–	veracode
Veracode	Denial Of Service (DoS)	14 Jul 201705:43	–	veracode
Cvelist	CVE-2017-9804	20 Sep 201717:00	–	cvelist
Cvelist	CVE-2017-7672	13 Jul 201715:00	–	cvelist

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-9804
security	www.security.netapp.com/advisory/ntap-20180629-0001/
struts	www.struts.apache.org/docs/s2-050.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-003.txt
oracle	www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
github	www.github.com/apache/struts/commit/418a20c0594f23764fe29ced400c1219239899a
web	www.web.archive.org/web/20171113165852/http://www.securityfocus.com/bid/100612
web	www.web.archive.org/web/20201021075553/http://www.securitytracker.com/id/1039261
github	www.github.com/advisories/GHSA-x5x7-3v85-wpc4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Oct 2018 19:37Current

6.5Medium risk

Vulners AI Score6.5

CVSS25

CVSS37.5

EPSS0.0595

CWE-20