Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.struts:struts-core

5 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 medium
Registry
Maven Central

Advisories 5

  • CVE-2023-34396Medium 4.3

    Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms

    Affected: through 1.3.10.

  • ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attacke

    Affected: through 1.3.10.

  • ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote atta

    Affected: through 1.3.10.

  • The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions…

    Affected: from 1.1, through 1.3.10.

  • Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary…

    Affected: through 1.2.7.