Archive
28 August 2007
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium —
OpenSymphony XWork vulnerable to improper input validation
Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to…