| CVE-2017-12611 |
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag…
|
Non notée
|
20 sept. 2017 |
| CVE-2016-8738 |
In Apache Struts 2.5 through 2.5.5, if an application allows entering a URL in a form field and the built-in…
|
Non notée
|
20 sept. 2017 |
| CVE-2016-6795 |
In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a…
|
Non notée
|
20 sept. 2017 |
| CVE-2017-9805 |
Exploitée
Apache Struts Deserialization of Untrusted Data Vulnerability
|
8.1
Élevée
|
15 sept. 2017 |
| CVE-2017-9787 |
When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack
|
Non notée
|
13 juil. 2017 |
| CVE-2017-7672 |
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a…
|
Non notée
|
13 juil. 2017 |
| CVE-2017-9791 |
Exploitée
Apache Struts 1 Improper Input Validation Vulnerability
|
9.8
Critique
|
10 juil. 2017 |
| CVE-2017-5638 |
Exploitée
Apache Struts Remote Code Execution Vulnerability
|
9.8
Critique
|
11 mars 2017 |