Описание
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libstruts1.2-java | not-affected | package |
Примечания
https://struts.apache.org/docs/s2-024.html
EPSS
Процентиль: 93%
0.06312
Низкий
Связанные уязвимости
ubuntu
около 11 лет назад
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
redhat
больше 11 лет назад
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
nvd
около 11 лет назад
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
EPSS
Процентиль: 93%
0.06312
Низкий