CVE-2016-4436

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-4436
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4436.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-4436
Aliases
Published
2016-10-03T15:59:01.913Z
Modified
2026-03-15T22:08:27.915738Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.

References

Affected packages

Git / github.com/apache/struts

Affected ranges

Type
GIT
Repo
https://github.com/apache/struts
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2c0a197cea8fdc7d8cda5eeaa15a1c76507ac0a5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a4ea6dce4e2d622a57480c1bc337f46315fde96
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
591347a498b358112cf478a3135107eae39d6e43
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a614104a485c8b1a8d16d51511b50d922f00ab3f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
df365f17ea11e319302f648e86da3188ce1c5656
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cb580fe614d5ff73776c34e39a93aae2ad557757
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe62eb03471666cb871c1d5969b98dc79d578d2d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de154978ca69a59079024dc6468eedd261293bff
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8135547c7a53364c17a93ba0a38f0463f0315ac5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b3f712eb1b6b7d38b6f3dce6ee63147f0f96c259
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e372ca3d17ba24778cf57e502ba85bc75b613f2c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4b744ef87b9bd8ebff43675259df3ae650c9585e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
77cd231b589249b07f36e29061970070ecdd50f3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
645d06e11668b66204db10b5628685650333c5c1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6fa6f1014b309a96755e94d13563052055402701
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e893492adcacc5b4f09f378fe1d8f80de1814038
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3f3776e7dcf106fe05041c743ea32c779e595197
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ef3c3ece89c6723340c9bc9271e3d2130378afad
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2bbc0452601e9816eabcffae0775f9549a651e4c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f9d681cc97a175676786ddebed6b5924187e5ae3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c80cb8458966e10d88a192b5ce68e47aee0e944a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2afda2ecc45730f5c0fc1f88c5d8919fb34d1462
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e5009a34202777b53c5dc36e020d0033aa8be027
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7d7d3fc42b013f0983a16473b10ed24efb988e0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6246b8e12eb5abee95916b948a7a97e4d736f10b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
183be6b2986755eeac9b86eed9138304a30ff45e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
676a011b4f4d211e167465f3ffb03894c8f60334
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4b5f5619ddeda22f7f358431f604df580f1e61a1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
28297863aee4d747638ce5b6f22262ac6a118ae0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b2fe62824eebd213625d23378b5307dcb1b82c77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f15f28a1766fe991de85c8cd089b102f77915319
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9df00b0a864fac2e763b7c26ba99af057202f0f3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fc3df96990bafdecc6f3a89cf7a4dcf15066c687
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f0c159d871ee741e0cc74fe858cc7be79841078c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a72c1f4262a57bfe2819c6def81620d02d7867fb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc6094eece7dfa65e7439cd018d58e85c5d41e47
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8931ac19ea504a167f4d0c8e57ccc8f7f09f4135
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd206c1386cc113e3f5b52fbc5b2f15a458b31b4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3565f4d4f5c4c85a1ffab9e6169c86527aa6f4c7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
402374de33146e1c0401a247e0779e290cb0c078
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6cddee6fc539429544b28a96361a8af7a0691108
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7dd83dff485d324980f3d22c726cfd969ecf41f8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e03ff728618f5bf551083fc3a52d43c07434bbc9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0320310406f6b11cfd235d7a9b866cf1de483a1e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a9974eec5689a7113a6fb1e2096252f0935064dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bbbf43ec59e7bef3b07e9065dc9784c18a95d58b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
925741ad1e8e48c7a6d687fe02d3fdb6386eb64c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a9863169f7d981be0d2d57437974ae2cc0c8bd3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
36b6fff05cd4a17f75b091c0edd52e0c1e65ec06
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0ac8932aa3a1b28a8f950863c17165cdc63b1474
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2cf0a7efeb12c8f476e31324dc56456b340ddeab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4bee55fee30086c786d09503125a2b1c2ae8dcfa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a37a2e32db6d6905de48e04f71d995f41055827
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
56ae397d75430dc63fd68b0bfb36afbac1226023
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9a63e6504b2d246573ff1483d45d9b12a49aa9c6
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.11.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.11.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.8.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.20.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.20.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.24.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.24.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.28.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5-beta3"
        }
    ]
}

Affected versions

Other
STRUTS_2_2_1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4436.json"