GHSA-4QGJ-9MVG-3929 Special top object can be used to access Struts' internals

🗓️ 14 May 2022 03:15:08Reported by GoogleType

osv🔗 osv.dev👁 17 Views

Special top object for Struts' internal acces

Reporter	Title	Published	Views	Family All 21
IBM Security Bulletins	Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.	12 Apr 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Struts affects the IBM FlashSystem model V9000 (CVE-2015-5209)	18 Jun 201800:10	–	ibm
IBM Security Bulletins	Security Bulletin:A vulnerability in Struts affects the IBM FlashSystem model V840 (CVE-2015-5209)	18 Jun 201800:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Struts affects IBM SAN Volume Controller and Storwize Family (CVE-2015-5209)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:45	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Struts affects the IBM FlashSystem models 840 and 900 (CVE-2015-5209)	18 Feb 202301:45	–	ibm
BDU FSTEC	The vulnerability of the ValueStack interface implementation in the Apache Struts software platform allows a attacker to gain access to read, modify, or delete data.	30 Sep 202200:00	–	bdu_fstec
CNVD	Apache Struts Security Bypass Vulnerability (CNVD-2016-01256)	23 Feb 201600:00	–	cnvd
CVE	CVE-2015-5209	29 Aug 201715:00	–	cve