|
Apache Struts Multiple Remote Vulnerabilities
Apache Struts is susceptible to multiple remote vulnerabilities. The following issues were identified: - A cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. - A denial-of-service vulnerability. An attacker may leverage this issue to crash an affected web application, denying further service to legitimate users. - A validation-bypass vulnerability. An attacker may leverage this issue to bypass validation and authentication checks in a web application. The exact consequences of this issue depend on the nature of the targeted application. Apache Struts versions prior to 1.2.9 are affected by these issues. |
|
|
Privacy Statement |
