Description
Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.struts:struts2-core | < 2.3.20 | 2.3.20 | GHSA-vwhv-j36g-5rm8 |
References
- https://security.netapp.com/advisory/ntap-20180629-0003/
- 76625 vdb-entry
- https://struts.apache.org/docs/s2-025.html
- JVNDB-2015-000125 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1260087
- JVN#95989300 third-party-advisory