PT-2012-1243

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.3.1.2 and earlier, 2.3.19 through 2.3.23 Description The issue is related to inadequate access restrictions in certain interfaces, potentially allowing remote attackers to modify run-time data values by providing a...

CVE-2011-5057: Undefined Security Weakness

Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might allow remote attackers to modify run-time data values via a crafted parameter to an application that implements an...