Описание
Incomplete exclude pattern in Apache Struts
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors. In Struts 2.3.20.1 a better set of exlude patterns was defined.
Пакеты
org.apache.struts:struts2-core
>= 2.0.0, < 2.3.20.1
2.3.20.1
org.apache.struts.xwork:xwork-core
>= 2.0.0, < 2.3.20.1
2.3.20.1
EPSS
CVE ID
Связанные уязвимости
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 a ...
EPSS