Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-qcfc-hmrc-59x7
  • Maven/com.opensymphony:xwork
  • Maven/org.apache.struts.xwork:xwork-core
  • Maven/org.apache.struts:struts2-core
Apache Struts 2 is Missing XML Validation 11 Jan
  • Fix available
  • Severity - 8.1 (High)
GHSA-rg58-xhh7-mqjw
  • Maven/org.apache.struts:struts2-core
Apache Struts has a Denial of Service vulnerability 10 Dec 2025
  • Fix available
  • Severity - 8.2 (High)
GHSA-xx7v-hqxh-cjr9
  • Maven/org.apache.struts:struts2-core
Apache Struts is Vulnerable to DoS via File Leak 01 Dec 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-43mq-6xmg-29vm
  • Maven/org.apache.struts:struts2-core
Apache Struts file upload logic is flawed 11 Dec 2024
  • Fix available
  • Severity - 9.5 (Critical)
GHSA-2j39-qcjm-428w
  • Maven/org.apache.struts:struts2-core
Apache Struts vulnerable to path traversal 07 Dec 2023
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-729q-fcgp-r5xh
  • Maven/org.apache.struts:struts2-core
Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability 05 Dec 2023
  • Fix available
  • Severity - 7.5 (High)
GHSA-4g42-gqrg-4633
  • Maven/org.apache.struts:struts-core
  • Maven/org.apache.struts:struts2-core
  • Maven/struts:struts
Apache Struts vulnerable to memory exhaustion 14 Jun 2023
  • Fix available
  • Severity - 7.5 (High)
GHSA-8f6x-v685-g2xc
  • Maven/org.apache.struts:struts2-core
Apache Struts vulnerable to memory exhaustion 14 Jun 2023
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-ccp5-gg58-pxfm
  • Maven/org.apache.struts:struts2-core
Improper Preservation of Permissions in Apache Struts 24 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-265r-pp83-gww7
  • Maven/org.apache.struts:struts2-core
Cross-site Scripting in Apache Struts 24 May 2022
  • Fix available
GHSA-jgcr-9c2q-rvp8
  • Maven/org.apache.struts:struts2-core
Apache Struts is vulnerable to Cross-site Scripting 17 May 2022
  • Fix available
GHSA-wv7g-xhvw-8hcp
  • Maven/org.apache.struts:struts2-core
Apache Struts directory traversal vulnerability 17 May 2022
  • Fix available
GHSA-56f8-g68r-j699
  • Maven/org.apache.struts:struts2-core
Cross-site Scripting in Apache Struts 17 May 2022
  • Fix available
GHSA-3g8j-jj54-3vjg
  • Maven/org.apache.struts:struts2-core
Apache Struts is vulnerable to Cross-site Scripting 17 May 2022
  • Fix available
GHSA-q5q8-jghf-3pm3
  • Maven/org.apache.struts:struts2-core
Apache Struts2 Broken Access Control Vulnerability 17 May 2022
  • Fix available
GHSA-2j4q-9fff-236j
  • Maven/org.apache.struts:struts2-core
Apache Struts XSS Vulnerability 17 May 2022
  • Fix available
  • Severity - 6.1 (Medium)