org.apache.struts:struts-core
Maven6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.apache.struts:struts-corepage 1 of 1
- CVE-2005-3745NONECVSS 0.02005-11-22
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request han…
- CVE-2012-1007NONECVSS 0.02012-02-07
vulnerable: 1.3.10, 1.3.5, 1.3.8, 1.3.9
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2…
- CVE-2015-0899HIGHCVSS 7.5EG 7.52016-07-04
vulnerable: 1.3.10, 1.3.5, 1.3.8, 1.3.9
The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.
- CVE-2016-1181HIGHCVSS 8.1EG 8.12016-07-04
vulnerable: 1.3.10, 1.3.5, 1.3.8, 1.3.9
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multi…
- CVE-2016-1182HIGHCVSS 8.2EG 8.22016-07-04
vulnerable: 1.3.10, 1.3.5, 1.3.8, 1.3.9
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a …
- CVE-2023-34396MEDIUMCVSS 4.3EG 4.32023-06-14
vulnerable: 1.3.10, 1.3.5, 1.3.8, 1.3.9
Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater
Check whether org.apache.struts:struts-core is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.apache.struts:struts-core CVEs against the assets you own.
Start Free Scan →