CVE-2016-3093

Опубликовано: 07 июн. 2016

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ognl_project:ognl:*:*:*:*:*:*:*:*

Версия до 3.0.11 (включая)

Одно из

cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.08375

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-3093

CVSS3: 5.3

ubuntu

около 10 лет назад

CVE-2016-3093

redhat

около 10 лет назад

CVE-2016-3093

CVSS3: 5.3

debian

около 10 лет назад

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method re ...

GHSA-383p-xqxx-rrmp

CVSS3: 5.3

github

больше 4 лет назад

Denial of service in Apache Struts

EPSS

Процентиль: 94%

0.08375

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20