be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +139 more potentially affected by CVE-2012-4386 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.4)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.2.0, =1.0.3, =0.6, =3.0-rc2, =5.0.1 and more Source cves: CVE-2012-4386 Source advisory: GHSA-2RVH-Q539-Q33V...

CVE-2012-4386

The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks by setting the token name configuration parameter to a session attribute...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +139 more potentially affected by CVE-2012-4386 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.4)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.2.0, =1.0.3, =0.6, =3.0-rc2, =5.0.1 and more Source cves: CVE-2012-4386 Source advisory: MEND:CVE-2012-4386...