Skip to content
OpenAdvisories

Package · Maven

org.apache.struts:struts-core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2015-0899 EPSS 21%

    Improper Input Validation in Apache Struts

    The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.

    struts:struts org.apache.struts:struts-core Maven
  • High 8.1
    CVE-2016-1181 EPSS 13%

    Improper Input Validation in Apache Struts

    ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a rela…

    struts:struts org.apache.struts:struts-core Maven
  • High 8.2
    CVE-2016-1182 EPSS 26%

    Improper Input Validation in Apache Struts

    ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE…

    struts:struts org.apache.struts:struts-core Maven