Lucene search
GoogleOSV:GHSA-P3VW-FVWX-QCV5HistoryMay 01, 2022 - 6:50 a.m.
Cross-site scripting in Apache Struts
2022-05-0106:50:42
Google
osv.dev
32
cross-site scripting
apache struts
xss
vulnerability
remote attackers
web script
html
parameter filtering
EPSS
0.015
Percentile
86.8%
Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.
Related
cvelist
cvelist
CVE-2006-1548
2006-03-30 22:00:00
cve
cve
CVE-2006-1548
2006-03-30 22:02:00
github
github
Cross-site scripting in Apache Struts
2022-05-01 06:50:42
prion
prion
Cross site scripting
2006-03-30 22:02:00
ubuntucve
ubuntucve
CVE-2006-1548
2006-03-30 00:00:00
nvd
nvd
CVE-2006-1548
2006-03-30 22:02:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-14 02:37:40
openvas
openvas
Apache Struts Security Update (CVE-2006-1546, CVE-2006-1547, CVE-2006-1548)
2021-09-16 00:00:00
redhat
redhat
(RHSA-2006:0281) struts security update for Red Hat Application Server
2006-05-03 00:00:00
ibm
ibm
Security Bulletin: Multiple CVEs affect IBM Integration Designer
2023-02-01 19:40:57