VulnerableCode Package Details - pkg:maven/com.opensymphony/xwork@2.0-alpha0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/com.opensymphony/xwork@2.0-alpha0

Essentials
History (1)

purl	pkg:maven/com.opensymphony/xwork@2.0-alpha0
Tags	Ghost

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk	10.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-u5zn-2jp1-97h2 Aliases: CVE-2008-6504 GHSA-wxw2-2mx5-c5qf	Improper Input Validation Remote attackers could execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a `#` representation for the `#` character.	2.0.6 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.1.2-SNAPSHOT Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.1.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-u5zn-2jp1-97h2
Aliases:
CVE-2008-6504
GHSA-wxw2-2mx5-c5qf

Improper Input Validation Remote attackers could execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a `#` representation for the `#` character.

2.0.6
Affected by 1 other vulnerability.

2.1.2-SNAPSHOT
Affected by 1 other vulnerability.

2.1.2
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T12:46:45.573571+00:00	GitLab Importer	Affected by	VCID-u5zn-2jp1-97h2	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.opensymphony/xwork/CVE-2008-6504.yml	38.0.0