Skip to content
OpenAdvisories
Medium CVE-2015-2992 EUVD-2022-1915GHSA-265r-pp83-gww7

Cross-site Scripting in Apache Struts

Published Feb 27, 2020 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Apache Software Foundation Product: Apache Struts Package: org.apache.struts:struts2-core Ecosystem: Maven

Description

Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Struts before 2.3.20 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.struts:struts2-core < 2.3.20 2.3.20 GHSA-265r-pp83-gww7

References