High DLA-292-1 1 CVE

libstruts1.2-java - security update

Published Aug 15, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	libstruts1.2-java	1.2.9-4+deb6u2

Vulnerabilities 1

High 7.5

CVE-2015-0899 EPSS 21%

Improper Input Validation in Apache Struts

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.

struts:struts org.apache.struts:struts-core Maven

Jul 4, 2016