Lucene search
GoogleOSV:GHSA-XM92-V2MQ-842QHistoryMay 17, 2022 - 2:16 a.m.
Apache Struts improper action name cleanup
2022-05-1702:16:00
Google
osv.dev
9
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.
References
www-01.ibm.com/support/docview.wss?uid=ssg1S1009282
www-01.ibm.com/support/docview.wss?uid=swg21987854
www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
github.com/apache/struts
github.com/apache/struts/commit/237432512df0e27013f7c7b9ab59fdce44ca34a5
github.com/apache/struts/commit/27ca165ddbf81c84bafbd083b99a18d89cc49ca7
nvd.nist.gov/vuln/detail/CVE-2016-4436
struts.apache.org/docs/s2-035.html
web.archive.org/web/20161015140316/www.securityfocus.com/bid/91280
Related
nvd
nvd
CVE-2016-4436
2016-10-03 15:59:01
openvas
openvas
Apache Struts Unspecified Vulnerability (S2-035) - Linux
2016-11-18 00:00:00
Apache Struts Security Update (S2-035)
2016-11-18 00:00:00
cvelist
cvelist
CVE-2016-4436
2016-10-03 15:00:00
f5
f5
K93135205 : Apache Struts 2 vulnerability CVE-2016-4436
2017-08-03 00:00:00
cve
cve
CVE-2016-4436
2016-10-03 15:59:01
github
github
Apache Struts improper action name cleanup
2022-05-17 02:16:00
Bypassing OGNL sandboxes for fun and charities
2023-01-27 16:00:49
ubuntucve
ubuntucve
CVE-2016-4436
2016-10-03 00:00:00
redhatcve
redhatcve
CVE-2016-4436
2016-06-20 14:18:25
prion
prion
Input validation
2016-10-03 15:59:00
ibm
ibm
nessus
nessus
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00