exploitDog

CVE-2006-1546

Опубликовано: 22 мар. 2006

Источник: redhat

EPSS Низкий

Описание

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=430530struts bypass validation

EPSS

Процентиль: 81%

0.01612

Низкий

Связанные уязвимости

CVE-2006-1546

ubuntu

больше 19 лет назад

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.

CVE-2006-1546

nvd

больше 19 лет назад

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.

CVE-2006-1546

debian

больше 19 лет назад

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote att ...

GHSA-vf8g-mpmw-qv87

CVSS3: 7.3

github

больше 3 лет назад

Apache Struts vulnerable to Improper Input Validation

EPSS

Процентиль: 81%

0.01612

Низкий