org.apache.struts:struts2-core vulnerabilities (Maven)
60 vulnerabilities.
-
org.apache.struts:struts2-coreMaven Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component 8.1 High -
org.apache.struts:struts2-coreMaven Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) - version ranges fixed 8.2 High -
org.apache.struts:struts2-coreMaven Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) 7.5 High -
org.apache.struts:struts2-coreMaven Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks 9.5 Critical -
org.apache.struts:struts2-coreMaven Apache Struts: File upload component had a directory traversal vulnerability 9.8 Critical -
org.apache.struts:struts2-coreMaven Apache Struts: excessive disk usage 7.5 High -
org.apache.struts:struts2-coreMaven Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms 4.3 Medium -
org.apache.struts:struts2-coreMaven Apache Struts: DoS via OOM owing to not properly checking of list bounds 4.3 Medium -
org.apache.struts:struts2-coreMaven Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE. 9.8 Critical -
org.apache.struts:struts2-coreMaven Remote code execution in Apache Struts 9.8 Critical -
org.apache.struts:struts2-coreMaven Improper Preservation of Permissions in Apache Struts 7.5 High -
org.apache.struts:struts2-coreMaven Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts 9.8 Critical -
org.apache.struts:struts2-coreMaven Cross-site Scripting in Apache Struts 6.1 Medium -
org.apache.struts:struts2-coreMaven Unrestricted Upload of File with Dangerous Type in Apache Struts2 8.8 High -
org.apache.struts:struts2-coreMaven Struts ParameterInterceptor vulnerability allows remote command execution 9.8 Critical -
org.apache.struts:struts2-coreMaven Apache Struts vulnerable to remote command execution (RCE) due to improper input validation 8.1 High -
org.apache.struts:struts2-coreMaven Apache Struts forced double OGNL evaluation 8.8 High -
org.apache.struts:struts2-coreMaven Cross-site Scripting in Apache Struts 6.1 Medium -
org.apache.struts:struts2-coreMaven Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used 7.5 High -
org.apache.struts:struts2-coreMaven Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal 9.8 Critical -
org.apache.struts:struts2-coreMaven Apache Struts vulnerable to possible DoS attack when using URLValidator 5.9 Medium -
org.apache.struts:struts2-coreMaven Special top object can be used to access Struts' internals 7.5 High -
org.apache.struts:struts2-coreMaven Spring AOP functionality (Struts) vulnerable to DoS attack 7.5 High -
org.apache.struts:struts2-coreMaven Apache Struts Improper Input Validation vulnerability 5.9 Medium -
org.apache.struts:struts2-coreMaven Apache Struts vulnerable to remote arbitrary command execution due to improper input validation 9.8 Critical -
org.apache.struts:struts2-coreMaven Apache Struts improper action name cleanup 9.8 Critical -
org.apache.struts:struts2-coreMaven Apache Struts vulnerable to possible DoS attack when using URLValidator 5.3 Medium -
org.apache.struts:struts2-coreMaven Arbitrary code execution in Apache Struts 2 9.8 Critical -
org.apache.struts:struts2-coreMaven Denial of service in Apache Struts 5.3 Medium -
org.apache.struts:struts2-coreMaven Apache Struts vulnerable to arbitrary remote code execution due to improper input validation 9.8 Critical -
org.apache.struts:struts2-coreMaven Remote Code Execution in Apache Struts 9.8 Critical -
org.apache.struts:struts2-coreMaven Apache Struts RCE Vulnerability 8.1 High -
org.apache.struts:struts2-coreMaven Cross-site Scripting in Apache Struts 6.1 Medium -
org.apache.struts:struts2-coreMaven Apache Struts XSS Vulnerability 6.1 Medium -
org.apache.struts:struts2-coreMaven Apache Struts RCE Vulnerability 8.8 High -
org.apache.struts:struts2-coreMaven Incomplete exclude pattern in Apache Struts 7.5 High -
org.apache.struts:struts2-coreMaven Cross-Site Request Forgery in Apache Struts 6.8 Medium -
org.apache.struts:struts2-coreMaven ClassLoader manipulation in Apache Struts 5.8 Medium -
org.apache.struts:struts2-coreMaven ClassLoader manipulation in Apache Struts 7.5 High -
org.apache.struts:struts2-coreMaven ClassLoader manipulation in Apache Struts 7.5 High -
org.apache.struts:struts2-coreMaven ClassLoader manipulation in Apache Struts 5.0 Medium -
org.apache.struts:struts2-coreMaven Apache Struts is vulnerable to Cross-site Scripting 4.3 Medium -
org.apache.struts:struts2-coreMaven Code injection in Apache Struts 10.0 High -
org.apache.struts:struts2-coreMaven Apache Struts2 Broken Access Control Vulnerability 5.8 Medium -
org.apache.struts:struts2-coreMaven Code injection in Apache Struts 9.8 Critical -
org.apache.struts:struts2-coreMaven Open redirect in Apache Struts 5.8 Medium -
org.apache.struts:struts2-coreMaven Arbitrary code execution in Apache Struts 2 9.3 High -
org.apache.struts:struts2-coreMaven Arbitrary code execution in Apache Struts 2 9.3 High -
org.apache.struts:struts2-coreMaven Code injection in Apache Struts 8.1 High -
org.apache.struts:struts2-coreMaven Arbitrary code execution in Apache Struts 9.3 High - Show olderLoading…