Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:44 a.m.34 views

Apache Struts2 Broken Access Control Vulnerability

The Struts 2 action mapping mechanism supports the special parameter prefix action: which is intended to help with attaching navigational information to buttons within forms, under certain conditions this can be used to bypass security constraints. In Struts 2.3.15.3 the action mapping mechanism...

5.8CVSS7.8AI score0.07457EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/05/17 4:44 a.m.4 views

GHSA-Q5Q8-JGHF-3PM3 Apache Struts2 Broken Access Control Vulnerability

The Struts 2 action mapping mechanism supports the special parameter prefix action: which is intended to help with attaching navigational information to buttons within forms, under certain conditions this can be used to bypass security constraints. In Struts 2.3.15.3 the action mapping mechanism...

5.8CVSS7.2AI score0.07457EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/09/14 12:0 a.m.25 views

Apache Struts Security Update (S2-018)

The remote host is missing a security update for Apache Struts announced via the referenced advisory. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

5.8CVSS9.6AI score0.07457EPSS
SaveExploits1References2
Rows per page
Query Builder