CVE Intelligence

Maven Org.apache.struts:struts2-struts1-plugin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Org.apache.struts:struts2-struts1-plugin: 1 record(s), with affected versions and fixes.

CVE-2017-9791 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-20 Jul 10, 2017
Apache Struts 1 Improper Input Validation Vulnerability
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.