org.apache.struts:struts2-assembly (>=7.0.0, <=7.3.0), org.apache.struts:struts2-rest-showcase (>=7.0.0, <=7.3.0) potentially affected by CVE-2026-104713 via org.apache.struts:struts2-rest-plugin (>=7.0.0, <=7.3.0)

org.apache.struts:struts2-rest-plugin MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.3.0 Source cves: CVE-2026-104713 Source advisory: MEND:CVE-2026-104713...

com.jgeppert.struts2:struts2-aws-lambda-support-example (>=1.4.0, <=1.4.3), com.jgeppert.struts2:struts2-aws-lambda-support-plugin (>=1.4.0, <=1.4.3) +3 more potentially affected by CVE-2026-104713 via org.apache.struts:struts2-rest-plugin (>=6.0.0, <=6.11.0)

org.apache.struts:struts2-rest-plugin MAVEN version =6.0.0, =1.4.0, =1.4.0, =1.4.0, =6.0.0, =6.0.0, =6.11.0 Source cves: CVE-2026-104713 Source advisory: MEND:CVE-2026-104713...

org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.15), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.15.1) +5 more potentially affected by CVE-2013-4316 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.15.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2013-4316 Source advisory: OSV:GHSA-J7H6-XR7G-M2C5...

org.apache.struts:struts2-assembly (>=2.3.20, <=2.3.28.1), org.apache.struts:struts2-rest-showcase (>=2.3.20, <=2.3.28.1) potentially affected by CVE-2016-4438 via org.apache.struts:struts2-rest-plugin (>=2.3.20, <=2.3.28.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.3.20, =2.3.20, =2.3.20, =2.3.28.1 Source cves: CVE-2016-4438 Source advisory: OSV:GHSA-4PRJ-VW9J-V6PR...

com.github.kaitoy.sneo:giane (>=1.2.0, <=1.2.3), com.googlecode.struts2-conversation:struts2-conversation-scope-plugin (1.3.1) +13 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.3.1, <=2.3.30)

org.apache.struts:struts2-convention-plugin MAVEN version =2.3.1, =1.2.0, =1.1.0, =3.3.0, =3.3.0, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.2.1, =2.2, =3.2.0, =1.0, =1.2.2, =1.3.5 Source cves: CVE-2016-6795 Source advisory: GHSA-44HV-JJX7-QFJG...

org.apache.struts:struts2-assembly (>=2.3.20, <=2.3.28.1), org.apache.struts:struts2-rest-showcase (>=2.3.20, <=2.3.28.1) potentially affected by CVE-2016-4438 via org.apache.struts:struts2-rest-plugin (>=2.3.20, <=2.3.28.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.3.20, =2.3.20, =2.3.20, =2.3.28.1 Source cves: CVE-2016-4438 Source advisory: GHSA-4PRJ-VW9J-V6PR...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (2.5.0), org.apache.struts:struts2-assembly (>=2.5, <=2.5.2) +3 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.5, <=2.5.2)

org.apache.struts:struts2-convention-plugin MAVEN version =2.5, =2.5, =2.5, =2.5, =2.5, =2.5.2 Source cves: CVE-2016-6795 Source advisory: GHSA-44HV-JJX7-QFJG...

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-9805 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.12)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.12 Source cves: CVE-2017-9805 Source advisory: OSV:GHSA-GG9M-FJ3V-R58C...

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-9793 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.12)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.12 Source cves: CVE-2017-9793 Source advisory: OSV:GHSA-VWXJ-6M5M-RRVH...

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-15707 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.14)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.14 Source cves: CVE-2017-15707 Source advisory: GHSA-XCRM-QPP8-HCW4...

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-15707 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.14.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.14.1 Source cves: CVE-2017-15707 Source advisory: OSV:GHSA-XCRM-QPP8-HCW4...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (2.5.0), org.apache.struts:struts2-assembly (>=2.5, <=2.5.2) +3 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.5, <=2.5.2)

org.apache.struts:struts2-convention-plugin MAVEN version =2.5, =2.5, =2.5, =2.5, =2.5, =2.5.2 Source cves: CVE-2016-6795 Source advisory: MEND:CVE-2016-6795...

com.moomanow.web:moomanowwebapp (>=0.0.1, <=0.0.10), com.moomanow:moomanow-struts2-core (>=0.0.4, <=0.1.0) +2 more potentially affected by CVE-2017-9793 via org.apache.struts:struts2-rest-plugin (>=2.5, <=2.5.12)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5, =0.0.1, =0.0.4, =2.5, =2.5, =2.5.12 Source cves: CVE-2017-9793 Source advisory: MEND:CVE-2017-9793...

org.apache.struts:struts2-assembly (>=2.3.20, <=2.3.28.1), org.apache.struts:struts2-rest-showcase (>=2.3.20, <=2.3.28.1) potentially affected by CVE-2016-4438 via org.apache.struts:struts2-rest-plugin (>=2.3.20, <=2.3.28.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.3.20, =2.3.20, =2.3.20, =2.3.28.1 Source cves: CVE-2016-4438 Source advisory: MEND:CVE-2016-4438...

org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.15), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.15.1) +5 more potentially affected by CVE-2013-4316 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.15.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2013-4316 Source advisory: MEND:CVE-2013-4316...

CVE-2012-1006: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 lastName parameter to struts2-showcase/person/editPerson.action, or the 3 clientName parameter to struts2-rest-showcase/orders...

PT-2012-1242

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.14 through 2.2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name or lastName parameter to "struts2-showcase/person/editPerson.action", or the clientName parameter to...