Lucene search
GoogleOSV:GHSA-4QGJ-9MVG-3929HistoryMay 14, 2022 - 3:15 a.m.
Special top object can be used to access Struts' internals
2022-05-1403:15:08
Google
osv.dev
11
struts
valuestack
regex
security
patch
vulnerability
EPSS
0.003
Percentile
69.9%
ValueStack defines special top object which represents root of execution context. It can be used to manipulate Struts’ internals or can be used to affect container’s settings. Applying better regex which includes pattern to exclude request parameters trying to use top object. This issue was patched in Struts 2.3.24.1.
Related
ibm
ibm
nvd
nvd
CVE-2015-5209
2017-08-29 15:29:00
openvas
openvas
Apache Struts Security Update (S2-026)
2017-08-31 00:00:00
github
github
Special top object can be used to access Struts' internals
2022-05-14 03:15:08
cve
cve
CVE-2015-5209
2017-08-29 15:29:00
ubuntucve
ubuntucve
CVE-2015-5209
2017-08-29 00:00:00
cvelist
cvelist
CVE-2015-5209
2017-08-29 15:00:00
prion
prion
Design/Logic Flaw
2017-08-29 15:29:00
nessus
nessus
Apache Struts 2.x < 2.3.24.1 Multiple Vulnerabilities (S2-026) (S2-027)
2016-02-12 00:00:00