Apache Struts Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2008-2025 · ADVISORY
• bugzilla.novell.com/show_bug.cgi · WEB
• apache/struts · PACKAGE
• launchpad.net/bugs/cve/2008-2025 · WEB
• web.archive.org/web/20090410082732/http://secunia.com/advisories/34642 · WEB
• web.archive.org/web/20090411051126/http://secunia.com/advisories/34567 · WEB
• download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml · WEB
• lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html · WEB
• support.novell.com/security/cve/CVE-2008-2025.html · WEB
• osvdb.org/53380
• secunia.com/advisories/34567
• secunia.com/advisories/34642

struts:struts のその他の脆弱性

• CVE-2025-54656中 6.5** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Ex…
• CVE-2023-49735高 7.5** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not validated while reso…
• CVE-2023-34396高 7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Str…
• CVE-2016-1182高 8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attacke…
• CVE-2016-1181高 8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote atta…