Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.struts/struts-core@1.1
purl pkg:maven/org.apache.struts/struts-core@1.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-s3uq-35pj-byhy
Aliases:
CVE-2015-0899
GHSA-cvvx-r33m-v7pq
The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:30:54.888076+00:00 GHSA Importer Affected by VCID-s3uq-35pj-byhy https://github.com/advisories/GHSA-cvvx-r33m-v7pq 38.1.0
2026-04-01T12:50:39.185337+00:00 GitLab Importer Affected by VCID-s3uq-35pj-byhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2015-0899.yml 38.0.0