Search for packages
| purl | pkg:deb/debian/libstruts1.2-java@1.2.9-5%2Bdeb7u2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-nur4-1g8a-57ew | Improper Input Validation Apache Commons BeanUtils does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the `ActionForm` object in Struts |
CVE-2014-0114
GHSA-p66x-2cv9-qq3v |
| VCID-s3uq-35pj-byhy | The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter. |
CVE-2015-0899
GHSA-cvvx-r33m-v7pq |