Cross-site scripting in Apache Struts

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2006-1548 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/25614 · WEB
• apache/struts · PACKAGE
• issues.apache.org/bugzilla/show_bug.cgi
• lists.suse.com/archive/suse-security-announce/2006-May/0004.html
• secunia.com/advisories/19493
• secunia.com/advisories/20117
• securitytracker.com/id
• struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html
• securityfocus.com/bid/17342
• vupen.com/english/advisories/2006/1205
• issues.apache.org/struts/browse/STR-2781

struts:struts のその他の脆弱性

• CVE-2025-54656中 6.5** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Ex…
• CVE-2023-49735高 7.5** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not validated while reso…
• CVE-2023-34396高 7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Str…
• CVE-2016-1182高 8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attacke…
• CVE-2016-1181高 8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote atta…