2427 matches found
PT-2016-7114
Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.3.x through 2.3.30 Apache Struts versions 2.5.x through 2.5.4 Description A path traversal issue in Apache Struts allows attackers to execute arbitrary code on the server side using a specially crafted URL. This issue ...
CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
Input validation
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
CVE-2016-4436: Undefined Security Weakness
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially created request...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using the default method...
The vulnerability of the Apache Struts software platform, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the Apache Struts software platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack through a combined request...
The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions
The vulnerability of the MultiPageValidator implementation in the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing access restrictions by modifying page parameters remotely...
The vulnerability of the Apache Struts software platform, which allows attackers to trigger service failures or perform XSS attacks.
The vulnerability of the ActionServlet.java file on the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform XSS attacks or cause service failures by using specially crafted input data...
The vulnerability of the Apache Struts software platform, which allows a hacker to execute arbitrary code
The vulnerability of the REST plugin for the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created expression...
The vulnerability of the Apache Struts software platform, which allows a hacker to trigger a service failure
The vulnerability of the URLValidator class in the Apache Struts software framework exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by using a null value in the URL field...
Apache Struts URLValidator Denial of Service (CVE-2016-4465)
A denial of service vulnerability exists in Apache Struts URLValidator. The vulnerability is due to insufficient validation of crafted URLs by the URLValidator. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted HTTP request to a Struts 2 application...
Updated struts packages fix security vulnerabilities
Updated struts packages fix security vulnerabilities: A vulnerability in Apache Struts 1 ActionForm allowing unintended remote operations against components on server memory, such as Servlets and ClassLoader, was found CVE-2016-1181. It was reported that The Apache Struts 1 Validator contains a...
MGASA-2016-0244 Updated struts packages fix security vulnerabilities
Updated struts packages fix security vulnerabilities: A vulnerability in Apache Struts 1 ActionForm allowing unintended remote operations against components on server memory, such as Servlets and ClassLoader, was found CVE-2016-1181. It was reported that The Apache Struts 1 Validator contains a...
CVE-2016-4438
The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression...
The vulnerability of the implementation of the getClass method in the CookieInterceptor class of the Apache Struts software framework allows a hacker to execute arbitrary code.
The vulnerability of the CookieInterceptor class implementation in the Apache Struts software platform is related to deficiencies in access control when processing the cookiesName value with a placeholder. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending ...
