Apache Software Foundation Struts 2.5.32

CPE Details

Apache Software Foundation Struts 2.5.32
apache
struts
2.5.32
2017-09-30
08h37 +00:00
2017-09-30
08h37 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:apache:struts:2.5.32:*:*:*:*:*:*:*

Informations

Vendor

apache

Product

struts

Version

2.5.32

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-50164 2023-12-07 08h49 +00:00 An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
9.8
Critique
CVE-2009-1275 2009-04-09 13h00 +00:00 Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.
6.8