3 matches found
Apache Struts Security Update (S2-004) - Version Check
The remote host is missing a security update for Apache Struts announced via the referenced advisory. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
5CVSS6.8AI score0.72711EPSS
SaveExploits1References4
Apache Struts 2 < 2.0.12 / 2.1.3 Dispatcher Directory Traversal
The remote web server is using Apache Struts, a web application framework for developing Java EE web applications. The version of Apache Struts 2 installed on the remote host fails to properly decode and normalize the request path before serving static content. Using double-encoded directory...
5CVSS5.8AI score0.72711EPSS
SaveExploits1References3
20