Количество 6
Количество 6
CVE-2012-4386
The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.
CVE-2012-4386
The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.
CVE-2012-4386
The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.
CVE-2012-4386
The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does no ...
GHSA-2rvh-q539-q33v
Cross-Site Request Forgery in Apache Struts
BDU:2022-05908
Уязвимость реализации механизма проверки токенов программной платформы Apache Struts, позволяющая нарушителю осуществить CSRF-атаку
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2012-4386 The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute. | CVSS2: 6.8 | 3% Низкий | больше 13 лет назад |
 | CVE-2012-4386 The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute. | CVSS2: 4.3 | 3% Низкий | больше 13 лет назад |
 | CVE-2012-4386 The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute. | CVSS2: 6.8 | 3% Низкий | больше 13 лет назад |
| CVE-2012-4386 The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does no ... | CVSS2: 6.8 | 3% Низкий | больше 13 лет назад |
| GHSA-2rvh-q539-q33v Cross-Site Request Forgery in Apache Struts | 3% Низкий | больше 3 лет назад | |
 | BDU:2022-05908 Уязвимость реализации механизма проверки токенов программной платформы Apache Struts, позволяющая нарушителю осуществить CSRF-атаку | CVSS3: 8.3 | 3% Низкий | больше 13 лет назад |
Уязвимостей на страницу