Security
فارسی
All products

org.apache.struts:struts2-core

Maven · Package
60 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Struts Remote Java Code ExecutionCVE-2012-0391 · GHSA-4WRR-9H5R-M92W org.apache.struts.xwork:xwork-coreorg.apache.struts:struts2-core Maven Critical Fix reported
Apache Struts 2 is Missing XML ValidationCVE-2025-68493 · GHSA-QCFC-HMRC-59X7 com.opensymphony:xworkorg.apache.struts.xwork:xwork-core MavenRed Hat High Fix reported
Apache Struts has a Denial of Service vulnerabilityCVE-2025-66675 · GHSA-RG58-XHH7-MQJW org.apache.struts:struts2-core Maven High Fix reported
Apache Struts is Vulnerable to DoS via File LeakCVE-2025-64775 · GHSA-XX7V-HQXH-CJR9 org.apache.struts:struts2-coreRed Hat Fuse 7/struts2-core MavenRed Hat High Fix reported
Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerabilityCVE-2023-41835 · GHSA-729Q-FCGP-R5XH org.apache.struts:struts2-core Maven High Fix reported
Code injection in Apache StrutsCVE-2013-2251 · GHSA-47QP-8V9G-39HP org.apache.struts:struts2-core Maven Critical Fix reported
Remote code execution in Apache StrutsCVE-2020-17530 · GHSA-JC35-Q369-45PV org.apache.struts:struts2-core Maven Critical Fix reported
Apache Struts vulnerable to remote command execution (RCE) due to improper input validationCVE-2018-11776 · GHSA-CR6J-3JP9-RW65 org.apache.struts:struts2-core Maven High Fix reported
Apache Struts vulnerable to remote arbitrary command execution due to improper input validationCVE-2017-5638 · GHSA-J77Q-2QQG-6989 org.apache.struts:struts2-core Maven Critical Fix reported
Apache Struts vulnerable to memory exhaustionCVE-2023-34396 · GHSA-4G42-GQRG-4633 org.apache.struts:struts-coreorg.apache.struts:struts2-core Maven High Fix reported
Apache Struts file upload logic is flawedCVE-2024-53677 · GHSA-43MQ-6XMG-29VM org.apache.struts:struts2-core Maven Critical Fix reported
Apache Struts forced double OGNL evaluationCVE-2016-4461 · GHSA-864W-R5QJ-H6FJ org.apache.struts:struts2-core Maven High Fix reported
Apache Struts vulnerable to path traversalCVE-2023-50164 · GHSA-2J39-QCJM-428W org.apache.struts:struts2-core Maven Critical Fix reported
Apache Struts vulnerable to memory exhaustionCVE-2023-34149 · GHSA-8F6X-V685-G2XC org.apache.struts:struts2-core Maven Medium Fix reported
Apache Struts is vulnerable to Cross-site ScriptingCVE-2013-6348 · GHSA-3G8J-JJ54-3VJG org.apache.struts:struts2-core Maven Medium Fix reported
Apache Struts2 Broken Access Control VulnerabilityCVE-2013-4310 · GHSA-Q5Q8-JGHF-3PM3 org.apache.struts:struts2-core Maven Medium Fix reported
Cross-Site Request Forgery in Apache StrutsCVE-2012-4386 · GHSA-2RVH-Q539-Q33V org.apache.struts:struts2-core Maven Medium Fix reported
Arbitrary code execution in Apache Struts 2CVE-2013-2135 · GHSA-PW8R-X2QM-3H5M org.apache.struts.xwork:xwork-coreorg.apache.struts:struts2-core Maven High Fix reported
ClassLoader manipulation in Apache StrutsCVE-2014-0116 · GHSA-HMHQ-382Q-MP56 org.apache.struts:struts2-core Maven High Fix reported
Code injection in Apache StrutsCVE-2013-4316 · GHSA-J7H6-XR7G-M2C5 org.apache.struts:struts2-coreorg.apache.struts:struts2-rest-plugin Maven High Fix reported