High DSA-3536-1 1 CVE

libstruts1.2-java - security update

Published Mar 31, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	libstruts1.2-java	1.2.9-5+deb7u2

Vulnerabilities 1

High 7.5

CVE-2015-0899 EPSS 21%

Improper Input Validation in Apache Struts

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.

struts:struts org.apache.struts:struts-core Maven

Jul 4, 2016