CVE-2012-1007: XSS

Q: What is the severity of CVE-2012-1007?

The severity of CVE-2012-1007 is classified as important due to its potential for cross-site scripting attacks.

Q: How do I fix CVE-2012-1007?

To fix CVE-2012-1007, upgrade to a newer version of Apache Struts that is not affected, specifically above 1.3.10.

Q: Which versions of Apache Struts are affected by CVE-2012-1007?

CVE-2012-1007 affects Apache Struts version 1.3.10 and earlier.

Q: What type of vulnerability is CVE-2012-1007?

CVE-2012-1007 is identified as a cross-site scripting (XSS) vulnerability.

Q: Can CVE-2012-1007 be exploited remotely?

Yes, CVE-2012-1007 can be exploited remotely by attackers through crafted web requests.

Published Feb 7, 2012

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.

Other sources

Affected Software

3 affected components

maven/struts:struts<=1.3.10

maven/org.apache.struts:struts-core<=1.3.10

Apache struts=1.3.10

Event History

Feb 7, 2012

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

May 14, 2022

Advisory Published

via GitHub·02:21 AM

Frequently Asked Questions

What is the severity of CVE-2012-1007?

The severity of CVE-2012-1007 is classified as important due to its potential for cross-site scripting attacks.

How do I fix CVE-2012-1007?