ClassLoader manipulation in Apache Struts

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2014-0094 · ADVISORY
• apache/struts commit 2e2da29 · WEB
• apache/struts commit 6315241 · WEB
• apache/struts · PACKAGE
• jvn.jp/en/jp/JVN19294237/index.html · WEB
• jvndb.jvn.jp/jvndb/JVNDB-2014-000045 · WEB
• packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html · WEB
• struts.apache.org/release/2.3.x/docs/s2-020.html · WEB
• www-01.ibm.com/support/docview.wss · WEB
• huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm · WEB
• konakart.com/downloads/ver-7-3-0-0-whats-new · WEB
• vmware.com/security/advisories/VMSA-2014-0007.html · WEB
• secunia.com/advisories/56440 · Vendor Advisory
• secunia.com/advisories/59178 · Permissions Required
• oracle.com/technetwork/topics/security/cpuapr2015-2365600.html · Third Party Advisory
• securityfocus.com/archive/1/531362/100/0/threaded · Third Party Advisory
• securityfocus.com/archive/1/532549/100/0/threaded · Third Party Advisory
• securityfocus.com/bid/65999 · Third Party Advisory
• securitytracker.com/id/1029876 · Third Party Advisory

Lỗ hổng khác của org.apache.struts.xwork:xwork-core

• CVE-2025-68493CAO 8.1Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Str…
• CVE-2016-4433CAO 7.5Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a…
• CVE-2016-4430CAO 8.8Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CS…
• CVE-2015-1831CAO 7.5The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application"…
• CVE-2013-2135NGHIÊM TRỌNG 9.3Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both…