Package · Maven

org.apache.struts:struts2-convention-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2016-6795

Path Traversal in Apache Struts

In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a special URL which will be used for path traversal and execution of arbitrary code on server side.

Apache Software Foundation Apache Struts org.apache.struts:struts2-convention-plugin Maven

Sep 20, 2017