Yüksek CVSS 8.2

CVE-2016-1182: Struts: hatalı girdi doğrulama

Yayın: 5 Temmuz 2016 01:59 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899.

Özet bilgiler

Ürün: Apache Struts
CVSS v3.1: 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
EPSS: %25,74 (yüzdelik 98)
CWE: CWE-20
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
apache-struts	1.0	1.0	—
apache-struts	1.0	1.0	—
apache-struts	1.0	1.0	—
apache-struts	1.0	1.0	—
apache-struts	1.0.1	1.0.1	—
apache-struts	1.0.2	1.0.2	—
apache-struts	1.1	1.1	—
apache-struts	1.1	1.1	—
apache-struts	1.1	1.1	—
apache-struts	1.1	1.1	—
apache-struts	1.1	1.1	—
apache-struts	1.1	1.1	—
apache-struts	1.2.0	1.2.0	—
apache-struts	1.2.1	1.2.1	—
apache-struts	1.2.2	1.2.2	—
apache-struts	1.2.3	1.2.3	—
apache-struts	1.2.4	1.2.4	—
apache-struts	1.2.5	1.2.5	—
apache-struts	1.2.6	1.2.6	—
apache-struts	1.2.7	1.2.7	—
apache-struts	1.2.8	1.2.8	—
apache-struts	1.2.9	1.2.9	—
apache-struts	1.3.5	1.3.5	—
apache-struts	1.3.6	1.3.6	—
apache-struts	1.3.7	1.3.7	—
apache-struts	1.3.8	1.3.8	—
apache-struts	1.3.9	1.3.9	—
apache-struts	1.3.10	1.3.10	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları