GitHub Advisoryadvisory · Maven
GHSA-rpj9-r897-wc6q Open redirect in Apache Struts
MEDIUM
Official page ↗
- Aliases
- CVE-2013-2248
- Ecosystem
- Maven
- Packages
- org.apache.struts:struts2-core
- Severity
- Moderate
- Weaknesses
- CWE-20
- Reviewed
- 2022-11-03
Affected packages
• Maven org.apache.struts:struts2-core: < 2.3.15.1 → fixed in 2.3.15.1
Description
The Struts 2 DefaultActionMapper used to support a method for short-circuit navigation state changes by prefixing parameters with "redirect:" or "redirectAction:", followed by a desired redirect target expression. This mechanism was intended to help with attaching navigational information to buttons within forms. Attackers could use this to redirect to arbitrary web sites and conduct phishing attacks.
In Struts 2 before 2.3.15.1 the information following "redirect:" or "redirectAction:" can easily be manipulated to redirect to an arbitrary location.
Related
Alias · CVE (1)
- CVE-2013-2248 Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web… vulnerability
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-2248 advisory
- https://github.com/apache/struts/commit/3cfe34fefedcf0fdcfcb061c0aea34a715b7de6 web
- https://github.com/apache/struts/commit/630e1ba065a8215c4e9ac03bfb09be9d655c2b6e web
- https://github.com/apache/struts package
- https://issues.apache.org/jira/browse/WW-4140 web
- http://struts.apache.org/release/2.3.x/docs/s2-017.html web