Search for packages
| purl | pkg:deb/debian/libstruts1.2-java@1.2.9-4%2Bdeb6u2 |
| Next non-vulnerable version | 1.2.9-5+deb7u2 |
| Latest non-vulnerable version | 1.2.9-5+deb7u2 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-nur4-1g8a-57ew
Aliases: CVE-2014-0114 GHSA-p66x-2cv9-qq3v |
Improper Input Validation Apache Commons BeanUtils does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the `ActionForm` object in Struts |
Affected by 0 other vulnerabilities. |
|
VCID-s3uq-35pj-byhy
Aliases: CVE-2015-0899 GHSA-cvvx-r33m-v7pq |
The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||