Withdrawn Advisory: Apache Struts XSS

中危 4.3CVE-2012-1007 · GHSA-9848-v244-962p · Published 07/02/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
org.apache.struts:struts-core Maven	`≤ 1.3.10`	No fix yet
struts:struts Maven	`≤ 1.3.10`	No fix yet
struts apache	`= 1.3.10`	No fix yet

Description

Withdrawn Advisory

This advisory has been withdrawn because it was deemed invalid. This link is maintained to preserve external references.

Original Description

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.

NVD description

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free