GHSA-9cjh-qmvx-436c

Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9cjh-qmvx-436c/GHSA-9cjh-qmvx-436c.json
Aliases
  • CVE-2005-3745
Published
2022-05-01T02:20:38Z
Modified
2023-09-18T23:52:44Z
Details

Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.

References

Affected packages

Maven / org.apache.struts:struts-core

Source Details

Package Name
org.apache.struts:struts-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Last affected
1.2.7

Ecosystem specific 

{
    "affected_functions": [
        ""
    ]
}