GHSA-wm8w-qp2f-728qHighCVSS 7.5

Apache Struts Open Redirect

Published
May 17, 2022
Last Modified
January 4, 2024

🔗 CVE IDs covered (1)

CVE-2016-4433 →

📋 Description

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request.

🎯 Affected products1

  • maven/org.apache.struts.xwork:xwork-core:>= 2.3.20, <= 2.3.28.1

🔗 References (11)