org.apache.struts:struts2-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2011-3923Criticalorg.apache.struts:struts2-core: Struts ParameterInterceptor vulnerability allows remote command execution CVE-2021-31805Criticalorg.apache.struts:struts2-core: Expression Language Injection in Apache Struts CVE-2020-17530Criticalorg.apache.struts:struts2-core: Remote code execution in Apache Struts CVE-2019-0230Criticalorg.apache.struts:struts2-core: Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts CVE-2018-11776Highorg.apache.struts:struts2-core: Apache Struts vulnerable to remote command execution (RCE) due to improper input validation CVE-2017-5638Criticalorg.apache.struts:struts2-core: Apache Struts vulnerable to remote arbitrary command execution due to improper input validation CVE-2017-9804Highorg.apache.struts:struts2-core: Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used CVE-2017-9787Highorg.apache.struts:struts2-core: Spring AOP functionality (Struts) vulnerable to DoS attack CVE-2017-7672Mediumorg.apache.struts:struts2-core: Apache Struts Improper Input Validation vulnerability CVE-2017-12611Criticalorg.apache.struts:struts2-core: Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo