high7.5
CVE-2015-5209
Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involvi…
Impact
Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Struts | Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/82550
- http://www.securitytracker.com/id/1033908
- https://security.netapp.com/advisory/ntap-20180629-0002/
- https://struts.apache.org/docs/s2-026.html
- http://www.securityfocus.com/bid/82550
- http://www.securitytracker.com/id/1033908
- https://security.netapp.com/advisory/ntap-20180629-0002/
- https://struts.apache.org/docs/s2-026.html