com.google.code.struts2webflow:struts2webflow-parent (1.0.4), com.google.code.struts2webflow:struts2webflow-plugin (1.0.4) +23 more potentially affected by CVE-2008-6682 via org.apache.struts:struts2-core (>=2.0.5, <=2.0.11)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.11 and more Source cves: CVE-2008-6682 Source advisory: GHSA-JGCR-9C2Q-RVP8...

com.google.code.struts2webflow:struts2webflow-parent (1.0.4), com.google.code.struts2webflow:struts2webflow-plugin (1.0.4) +24 more potentially affected by CVE-2008-6505 via org.apache.struts:struts2-core (>=2.0.5, <=2.0.11.2)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.11.2 and more Source cves: CVE-2008-6505 Source advisory: GHSA-WV7G-XHVW-8HCP...

com.google.code.struts2webflow:struts2webflow-parent (1.0.4), com.google.code.struts2webflow:struts2webflow-plugin (1.0.4) +24 more potentially affected by CVE-2008-6505 via org.apache.struts:struts2-core (>=2.0.5, <=2.0.11.2)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.11.2 and more Source cves: CVE-2008-6505 Source advisory: OSV:GHSA-WV7G-XHVW-8HCP...

br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2), net.sf.fastupload:fastupload-core (0.4.7) +25 more potentially affected by CVE-2008-6505 via org.apache.struts:struts2-core (2.1.2)

org.apache.struts:struts2-core MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - br.net.woodstock.rockframework:rockframework-web =1.2.1, =1.2.2 - net.sf.fastupload:fastupload-core...

br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2), net.sf.fastupload:fastupload-core (0.4.7) +25 more potentially affected by CVE-2008-6505 via org.apache.struts:struts2-core (2.1.2)

org.apache.struts:struts2-core MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - br.net.woodstock.rockframework:rockframework-web =1.2.1, =1.2.2 - net.sf.fastupload:fastupload-core...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +77 more potentially affected by CVE-2011-1772 via org.apache.struts:struts2-core (>=2.0.5, <=2.2.1.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =1.2.1, =0.6, =3.0-rc2, =2.4.0, =2.1.0, =3.0.2 and more Source cves: CVE-2011-1772 Source advisory: GHSA-56F8-G68R-J699...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +77 more potentially affected by CVE-2011-1772 via org.apache.struts:struts2-core (>=2.0.5, <=2.2.1.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =1.2.1, =0.6, =3.0-rc2, =2.4.0, =2.1.0, =3.0.2 and more Source cves: CVE-2011-1772 Source advisory: OSV:GHSA-56F8-G68R-J699...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +199 more potentially affected by CVE-2013-6348 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.15.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 and more Source cves: CVE-2013-6348 Source advisory: GHSA-3G8J-JJ54-3VJG...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +199 more potentially affected by CVE-2013-6348 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.15.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 and more Source cves: CVE-2013-6348 Source advisory: OSV:GHSA-3G8J-JJ54-3VJG...

Apache Struts2 Broken Access Control Vulnerability

The Struts 2 action mapping mechanism supports the special parameter prefix action: which is intended to help with attaching navigational information to buttons within forms, under certain conditions this can be used to bypass security constraints. In Struts 2.3.15.3 the action mapping mechanism...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +194 more potentially affected by CVE-2013-4310 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.15.2)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 and more Source cves: CVE-2013-4310 Source advisory: GHSA-Q5Q8-JGHF-3PM3...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +194 more potentially affected by CVE-2013-4310 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.15.2)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 and more Source cves: CVE-2013-4310 Source advisory: OSV:GHSA-Q5Q8-JGHF-3PM3...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +232 more potentially affected by CVE-2016-2162 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.24.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-2162 Source advisory: GHSA-2J4Q-9FFF-236J...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +232 more potentially affected by CVE-2016-2162 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.24.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-2162 Source advisory: OSV:GHSA-2J4Q-9FFF-236J...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +230 more potentially affected by CVE-2016-3082 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.20.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-3082 Source advisory: GHSA-PVM9-288C-V5WQ...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +232 more potentially affected by CVE-2016-3093 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-3093 Source advisory: GHSA-383P-XQXX-RRMP...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-3082 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-3082 Source advisory: GHSA-PVM9-288C-V5WQ...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +230 more potentially affected by CVE-2016-3082 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.20.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-3082 Source advisory: OSV:GHSA-PVM9-288C-V5WQ...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-3082 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-3082 Source advisory: OSV:GHSA-PVM9-288C-V5WQ...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +232 more potentially affected by CVE-2016-3093 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-3093 Source advisory: OSV:GHSA-383P-XQXX-RRMP...