Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7719
HistoryNov 09, 2018 - 5:08 a.m.

Cross-site Scripting (XSS)

2018-11-0905:08:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.01 Low

EPSS

Percentile

84.0%

JSON

struts2-core is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the improper handling of double quote characters in the href attribute of the s:a tag, as well as the parameters in the action attribute of the s:url tag, allowing XSS attacks.

CPENameOperatorVersion
struts 2 corele2.0.11

Related

cve 1
github 1
openvas 2
prion 1
nvd 1
cvelist 1
nessus 1
osv 1
cve
cve
CVE-2008-6682
2009-04-09 15:08:35
github
github
Apache Struts is vulnerable to Cross-site Scripting
2022-05-17 05:52:45
openvas
openvas
Apache Struts Cross Site Scripting Vulnerability
2009-04-23 00:00:00
Apache Struts Security Update (S2-002, S2-003)
2009-04-23 00:00:00
prion
prion
Cross site scripting
2009-04-09 15:08:00
nvd
nvd
CVE-2008-6682
2009-04-09 15:08:35
cvelist
cvelist
CVE-2008-6682
2009-04-09 15:00:00
nessus
nessus
Apache Struts 2 s:a / s:url Tag href Element XSS
2009-04-29 00:00:00
osv
osv
Apache Struts is vulnerable to Cross-site Scripting
2022-05-17 05:52:45

0.01 Low

EPSS

Percentile

84.0%

JSON
Related for VERACODE:7719
cve1github1openvas2prion1nvd1cvelist1nessus1osv1