Apache Struts Improper Input Validation vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-7672 · ADVISORY
• apache/struts · PACKAGE
• lists.apache.org/thread.html/3795c4dd46d9ec75f4a6eb9eca11c11edd3e796c6c1fd7b17b5dc50d@%3Cannouncements.struts.apache.org%3E · WEB
• security.netapp.com/advisory/ntap-20180706-0002 · WEB
• web.archive.org/web/20170907215142/http://www.securitytracker.com/id/1039114 · WEB
• web.archive.org/web/20200227144724/http://www.securityfocus.com/bid/99563 · WEB
• struts.apache.org/docs/s2-047.html · WEB
• oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html · WEB
• securityfocus.com/bid/99563 · Third Party Advisory
• securitytracker.com/id/1039114
• lists.apache.org/thread.html/3795c4dd46d9ec75f4a6eb9eca11c11edd3e796c6c1fd7b17b5dc50d%40%3Cannouncements.struts.apache.org%3E

org.apache.struts:struts2-core のその他の脆弱性

• CVE-2025-68493高 8.1Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Str…
• CVE-2025-66675高 8.2Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apac…
• CVE-2025-64775高 7.5Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apac…
• CVE-2024-53677緊急 9.8File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circums…
• CVE-2023-50164緊急 9.8An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious …