Apache Struts Cross-site scripting Vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2005-3745 · ADVISORY
• lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3@%3Cissues.struts.apache.org%3E · WEB
• lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db@%3Cissues.struts.apache.org%3E · WEB
• web.archive.org/web/20051230061138/http://www.hacktics.com/AdvStrutsNov05.html · WEB
• web.archive.org/web/20060315133810/http://securitytracker.com/alerts/2005/Nov/1015257.html · WEB
• web.archive.org/web/20060408105414/http://www.securityfocus.com/bid/15512 · WEB
• web.archive.org/web/20201125023452/http://www.securityfocus.com/archive/1/417296/30/0/threaded · WEB
• web.archive.org/web/20201207010315/https://cxsecurity.com/issue/WLB-2005110055 · WEB

Lỗ hổng khác của org.apache.struts:struts-core

• CVE-2023-34396CAO 7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Str…
• CVE-2016-1182CAO 8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attacke…
• CVE-2016-1181CAO 8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote atta…
• CVE-2015-0899CAO 7.5The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions v…
• CVE-2012-1007TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML vi…