Lucene search
K

5 matches found

OSV
OSV
added 2022/05/17 4:57 a.m.1 views

GHSA-3G8J-JJ54-3VJG Apache Struts is vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to 1 actionNames.action and 2 showConfig.action in config-browser/...

4.3CVSS5.9AI score0.02766EPSS
Exploits1References8
Github Security Blog
Github Security Blog
added 2022/05/17 4:57 a.m.24 views

Apache Struts is vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to 1 actionNames.action and 2 showConfig.action in config-browser/...

4.3CVSS5.7AI score0.02766EPSS
Exploits1References8Affected Software1
OpenVAS
OpenVAS
added 2021/09/16 12:0 a.m.13 views

Apache Struts Config Browser Plugin Exposed (S2-043) - Active Check

The remote host is exposing the Apache Struts Config Browser Plugin via HTTP. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

7.4AI score
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2019/02/15 12:0 a.m.21 views

Apache Struts Config Browser Plugin Detection

Binary data strutsconfigbrowserdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2019/02/13 12:0 a.m.11 views

Apache Struts 2 Config Browser Detected

Apache Struts 2 Config Browser Plugin is a module to help view Struts application's configuration at runtime. This plugin has been detected on the web application by the scanner. It may be possible for an attacker to view Apache Struts version, loaded configuration or accessible action URLs for...

6.8AI score
Exploits0References2
Rows per page
Query Builder