Advisories · Technology
Apache Software Foundation Apache Struts.
Every CVE that names Apache Software Foundation Apache Struts among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Apache Struts: Shared message formatter exposes date and time values across concurrent requests
- Apache Software Foundation Apache Struts
- Race condition
- CVSS 6.5 Medium
Apache Struts: Unbounded request body read in the REST plugin
- Apache Software Foundation Apache Struts
- Denial of service
- CVSS 7.5 High
Apache Struts: Disproportionate response size when rendering BigDecimal request parameters
- Apache Software Foundation Apache Struts
- CWE-405
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Struts: OGNL injection in the legacy RESTful action mapper
- Apache Software Foundation Apache Struts
- Code injection
- CVSS 4.3 Medium
Apache Struts: Shared serialization state in the JSON plugin
- Apache Software Foundation Apache Struts
- CWE-567
- CVSS 4.3 Medium
Apache Struts: Shared parsing state in the JSON plugin
- Apache Software Foundation Apache Struts
- CWE-567
- CVSS 7.5 High
Apache Struts: Unbounded growth of localized-text caches driven by the request locale
- Apache Software Foundation Apache Struts
- Denial of service
- CVSS 7.5 High
Apache Struts: Unbounded read of a Content Security Policy violation report
- Apache Software Foundation Apache Struts
- Denial of service
- CVSS 7.5 High
Apache Struts: Unbounded read of a JSON request body
- Apache Software Foundation Apache Struts
- Denial of service