Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.struts/struts-core@1.3.10
purl pkg:maven/org.apache.struts/struts-core@1.3.10
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-dk2f-14xj-9bf8
Aliases:
CVE-2023-34396
GHSA-4g42-gqrg-4633
Apache Struts vulnerable to memory exhaustion Denial of service via out of memory (OOM) owing to no sanity limit on normal form fields in multipart forms. When a Multipart request has non-file normal form fields, Struts used to bring them into memory as Strings without checking their sizes. This could lead to an OOM if developer has set struts.multipart.maxSize to a value equal or greater than the available memory. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater There are no reported fixed by versions.
VCID-g2gb-x2nh-2bgz
Aliases:
CVE-2012-1007
GHSA-9848-v244-962p
Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to `struts-examples/upload/upload-submit.do`, or the message parameter to (2) `struts-cookbook/processSimple.do` or (3) `struts-cookbook/processDyna.do`. There are no reported fixed by versions.
VCID-ppuk-knqn-tfc6
Aliases:
CVE-2016-1182
GHSA-5ggr-mpgw-3mgx
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899. There are no reported fixed by versions.
VCID-s3uq-35pj-byhy
Aliases:
CVE-2015-0899
GHSA-cvvx-r33m-v7pq
The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter. There are no reported fixed by versions.
VCID-wqjz-93pk-pbg7
Aliases:
CVE-2016-1181
GHSA-7jw3-5q4w-89qg
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:31:32.453314+00:00 GitLab Importer Affected by VCID-dk2f-14xj-9bf8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2023-34396.yml 38.4.0
2026-04-16T21:52:04.485966+00:00 GitLab Importer Affected by VCID-s3uq-35pj-byhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2015-0899.yml 38.4.0
2026-04-16T21:50:18.652362+00:00 GitLab Importer Affected by VCID-g2gb-x2nh-2bgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2012-1007.yml 38.4.0
2026-04-16T21:49:35.658813+00:00 GitLab Importer Affected by VCID-wqjz-93pk-pbg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1181.yml 38.4.0
2026-04-16T21:47:53.613932+00:00 GitLab Importer Affected by VCID-ppuk-knqn-tfc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1182.yml 38.4.0
2026-04-11T23:50:19.412704+00:00 GitLab Importer Affected by VCID-dk2f-14xj-9bf8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2023-34396.yml 38.3.0
2026-04-11T23:07:53.606404+00:00 GitLab Importer Affected by VCID-s3uq-35pj-byhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2015-0899.yml 38.3.0
2026-04-11T23:06:21.650077+00:00 GitLab Importer Affected by VCID-g2gb-x2nh-2bgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2012-1007.yml 38.3.0
2026-04-11T23:05:37.156399+00:00 GitLab Importer Affected by VCID-wqjz-93pk-pbg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1181.yml 38.3.0
2026-04-11T23:03:45.623309+00:00 GitLab Importer Affected by VCID-ppuk-knqn-tfc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1182.yml 38.3.0
2026-04-04T14:30:54.891628+00:00 GHSA Importer Affected by VCID-s3uq-35pj-byhy https://github.com/advisories/GHSA-cvvx-r33m-v7pq 38.1.0
2026-04-04T14:30:44.025071+00:00 GHSA Importer Affected by VCID-g2gb-x2nh-2bgz https://github.com/advisories/GHSA-9848-v244-962p 38.1.0
2026-04-02T23:53:34.893691+00:00 GitLab Importer Affected by VCID-dk2f-14xj-9bf8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2023-34396.yml 38.1.0
2026-04-02T23:16:18.962409+00:00 GitLab Importer Affected by VCID-s3uq-35pj-byhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2015-0899.yml 38.1.0
2026-04-02T23:14:37.522197+00:00 GitLab Importer Affected by VCID-g2gb-x2nh-2bgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2012-1007.yml 38.1.0
2026-04-02T23:13:52.017561+00:00 GitLab Importer Affected by VCID-wqjz-93pk-pbg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1181.yml 38.1.0
2026-04-02T23:12:07.751101+00:00 GitLab Importer Affected by VCID-ppuk-knqn-tfc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1182.yml 38.1.0
2026-04-02T16:59:36.015280+00:00 GHSA Importer Affected by VCID-dk2f-14xj-9bf8 https://github.com/advisories/GHSA-4g42-gqrg-4633 38.1.0
2026-04-01T16:01:29.334547+00:00 GHSA Importer Affected by VCID-wqjz-93pk-pbg7 https://github.com/advisories/GHSA-7jw3-5q4w-89qg 38.0.0
2026-04-01T16:01:28.870706+00:00 GHSA Importer Affected by VCID-ppuk-knqn-tfc6 https://github.com/advisories/GHSA-5ggr-mpgw-3mgx 38.0.0
2026-04-01T12:51:24.624515+00:00 GitLab Importer Affected by VCID-dk2f-14xj-9bf8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2023-34396.yml 38.0.0
2026-04-01T12:50:39.186985+00:00 GitLab Importer Affected by VCID-s3uq-35pj-byhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2015-0899.yml 38.0.0
2026-04-01T12:50:27.705880+00:00 GitLab Importer Affected by VCID-g2gb-x2nh-2bgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2012-1007.yml 38.0.0
2026-04-01T12:50:23.103343+00:00 GitLab Importer Affected by VCID-wqjz-93pk-pbg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1181.yml 38.0.0
2026-04-01T12:50:10.513095+00:00 GitLab Importer Affected by VCID-ppuk-knqn-tfc6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts-core/CVE-2016-1182.yml 38.0.0