Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-1182
HistoryJul 04, 2016 - 10:59 p.m.

Cross site scripting

2016-07-0422:59:00
PRIOn knowledge base
www.prio-n.com
2

7.5 High

AI Score

Confidence

High

0.949 High

EPSS

Percentile

99.3%

ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899.

Rows per page:
1-10 of 281

References