Lucene search

CVE-2016-4430

🗓️ 04 Jul 2016 00:00:00Reported by ubuntu.comType

Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, enabling remote CSRF attack

Reporter	Title	Published	Views	Family All 17
Prion	Cross site request forgery (csrf)	4 Jul 201622:59	–	prion
Cvelist	CVE-2016-4430	4 Jul 201622:00	–	cvelist
NVD	CVE-2016-4430	4 Jul 201622:59	–	nvd
Github Security Blog	Apache Struts CSRF Vulnerability	17 May 202200:29	–	github
OSV	Apache Struts CSRF Vulnerability	17 May 202200:29	–	osv
CVE	CVE-2016-4430	4 Jul 201622:59	–	cve
RedhatCVE	CVE-2016-4430	20 Jun 201620:24	–	redhatcve
Japan Vulnerability Notes	JVN#45093481: Multiple vulnerabilities in Apache Struts 2	20 Jun 201600:00	–	jvn
F5 Networks	K000139043 : Apache Struts vulnerabilities CVE-2016-4430, CVE-2016-4431, and CVE-2016-4433	26 Mar 202400:00	–	f5
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Struts affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm

Source	Link
struts	www.struts.apache.org/docs/s2-038.html
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-4430
launchpad	www.launchpad.net/bugs/cve/CVE-2016-4430
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-4430

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jul 2016 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS26.8

CVSS38.8

EPSS0.004