Skip to content
OpenAdvisories

Package · Maven

struts:struts

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-54656

    Apache Struts Extras: Improper Output Neutralization for Logs

    ** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Extras: before 2. When using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any…

    Apache Software Foundation Apache Struts Extras struts:struts org.apache.struts:struts-extras Maven
  • Medium 4.3
    CVE-2023-34396

    Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core struts:struts Maven
  • Medium —
    CVE-2008-2025

    Apache Struts Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remo…

    struts:struts Maven