Lucene search
GoogleOSV:GHSA-3G8J-JJ54-3VJGHistoryMay 17, 2022 - 4:57 a.m.
Apache Struts is vulnerable to Cross-site Scripting
2022-05-1704:57:18
Google
osv.dev
11
0.004 Low
EPSS
Percentile
73.1%
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to (1) actionNames.action and (2) showConfig.action in config-browser/.
References
packetstormsecurity.com/files/123805/Struts-2.3.15.3-Cross-Site-Scripting.html
seclists.org/fulldisclosure/2013/Oct/244
github.com/apache/struts
issues.apache.org/jira/browse/WW-4213
nvd.nist.gov/vuln/detail/CVE-2013-6348
security-tracker.debian.org/tracker/CVE-2013-6348
svn.apache.org/viewvc?view=revision&revision=1533354
ubuntu.com/security/CVE-2013-6348
Related
cvelist
cvelist
CVE-2013-6348
2013-11-02 21:00:00
openvas
openvas
Apache Struts 2.x <= 2.3.15.3 XSS Vulnerability
2013-10-29 00:00:00
ubuntucve
ubuntucve
CVE-2013-6348
2013-11-02 00:00:00
github
github
Apache Struts is vulnerable to Cross-site Scripting
2022-05-17 04:57:18
prion
prion
Cross site scripting
2013-11-02 21:55:00
nvd
nvd
CVE-2013-6348
2013-11-02 21:55:04
cve
cve
CVE-2013-6348
2013-11-02 21:55:04