Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2008/10/01 3:31 a.m.36 views

Make XWork ParametersInterceptor safe from parameter injection attacks

The XWork ParametersInterceptor is a security nightmare as it gives user input submitted form parameters unfettered access to getter/setter methods on action objects. In addition, the interceptor has been shown in the past to be vulnerable to Unicode attacks. Rather than fight a constant and ofte...

3.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder