https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:30:49.778667+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-01692 bdu:2016-01692 2026-10-02T21:30:49.782806+00:00 bdu:2016-01692 https://cve.radiocsirt.org/vuln/cnvd-2016-04091 cnvd-2016-04091 2026-10-02T21:30:49.782836+00:00 cnvd-2016-04091 https://cve.radiocsirt.org/vuln/euvd-2026-84385 EUVD-2026-84385 2026-10-02T21:30:49.782850+00:00 EUVD-2026-84385 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4433 fkie_cve-2016-4433 2026-10-02T21:30:49.782862+00:00

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request.

 https://cve.radiocsirt.org/vuln/ghsa-wm8w-qp2f-728q GHSA-wm8w-qp2f-728q — Apache Struts Open Redirect 2026-10-02T21:30:49.782887+00:00

Affected: Maven: org.apache.struts.xwork:xwork-core

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request.

 https://cve.radiocsirt.org/vuln/gsd-2016-4433 gsd-2016-4433 2026-10-02T21:30:49.782908+00:00 gsd-2016-4433 https://cve.radiocsirt.org/vuln/jvndb-2016-000112 jvndb-2016-000112 2026-10-02T21:30:49.782919+00:00

Apache Struts provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain a validation bypass in Getter method vulnerability. JPCERT/CC Addendum [Update: August 25, 2016] CVE-2016-4433 (S2-039) has been addressed in Struts 2.3.29, although the vendor has confirmed that similar issues still exist. According to the developer, these issues will be addressed in a future release. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.