Latest vulnerabilities for "apache struts 2 showcase"

Where

Sort:

Versions

2.0.0

2.3.13

maven/org.apache.struts:struts2-coreApache Struts: File upload component had a directory traversal vulnerability

Risk 96

Severity

9.8

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.

1 / 3

Source: NVD

First published (updated )

CVE-2023-50164

maven/org.apache.struts:struts2-coreCode Injection

Risk 83

Severity

9.3

Code Injection

AV:N/AC:M/Au:N/C:C/I:C/A:C

Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.

1 / 2

Source: GitHub

First published (updated )

CVE-2013-1965

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.