Skip to content
OpenAdvisories

Package · Maven

org.apache.struts:struts-core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-34396

    Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core struts:struts Maven
  • Medium —
    CVE-2005-3745 Public exploit EPSS 26%

    Apache Struts Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an er…

    org.apache.struts:struts-core Maven