GitHub Advisoryadvisory · Maven

GHSA-9cjh-qmvx-436c Apache Struts Cross-site scripting Vulnerability

MEDIUM Published 2022-05-01 Modified 2023-09-18 Official page ↗
Aliases
CVE-2005-3745
Ecosystem
Maven
Packages
org.apache.struts:struts-core
Severity
Moderate
Weaknesses
CWE-80
Reviewed
2023-09-18

Affected packages

• Maven org.apache.struts:struts-core: <= 1.2.7 (no fix yet)

Description

Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.

Related

Alias · CVE (1)

  • CVE-2005-3745 Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References