apache/struts Security Advisories | GitStock

high2022-05-01

Improper Input Validation in Apache Struts

GHSA-7qwv-cwgj-c8rj · CVE-2006-1547

high2022-04-23

Unrestricted Upload of File with Dangerous Type in Apache Struts2

GHSA-8m5q-crqq-6pmf · CVE-2012-1592

critical2022-02-09

Remote code execution in Apache Struts

GHSA-jc35-q369-45pv · CVE-2020-17530

critical2021-12-02

Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts

GHSA-wp4h-pvgw-5727 · CVE-2019-0230

high2018-10-18

Apache Struts vulnerable to remote command execution (RCE) due to improper input validation

GHSA-cr6j-3jp9-rw65 · CVE-2018-11776

critical2018-10-18

Apache Struts vulnerable to remote arbitrary command execution due to improper input validation

GHSA-j77q-2qqg-6989 · CVE-2017-5638

high2018-10-16

REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering

GHSA-gg9m-fj3v-r58c · CVE-2017-9805

high2018-10-16

Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used

GHSA-x5x7-3v85-wpc4 · CVE-2017-9804

medium2018-10-16

Apache Struts Improper Input Validation vulnerability

GHSA-9gp7-jvm2-r4mx · CVE-2017-7672

critical2018-10-16

Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal

GHSA-8fx9-5hx8-crhm · CVE-2017-12611

high2018-10-16

Apache Struts REST Plugin can potentially allow a DoS attack

GHSA-38cr-2ph5-frr9 · CVE-2018-1327