https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:04:52.208644+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-01273 bdu:2017-01273 2026-10-03T21:04:52.329588+00:00 bdu:2017-01273 https://cve.radiocsirt.org/vuln/certfr-2017-ale-004 certfr-2017-ale-004 — Une vulnérabilité a été découverte dans <span class="textit">Apache Struts</span>. Elle permet à un attaquant de provoq… 2026-10-03T21:04:52.329626+00:00 certfr-2017-ale-004 https://cve.radiocsirt.org/vuln/certfr-2017-avi-071 certfr-2017-avi-071 — Une vulnérabilité a été corrigée dans <span class="textit">Apache Struts</span>. Elle permet à un attaquant de provoque… 2026-10-03T21:04:52.329646+00:00 certfr-2017-avi-071 https://cve.radiocsirt.org/vuln/cnvd-2017-02474 cnvd-2017-02474 2026-10-03T21:04:52.329659+00:00 cnvd-2017-02474 https://cve.radiocsirt.org/vuln/euvd-2026-256361 EUVD-2026-256361 2026-10-03T21:04:52.329670+00:00 EUVD-2026-256361 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5638 fkie_cve-2017-5638 2026-10-03T21:04:52.329681+00:00

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.

 https://cve.radiocsirt.org/vuln/ghsa-j77q-2qqg-6989 GHSA-j77q-2qqg-6989 — Apache Struts vulnerable to remote arbitrary command execution due to improper input validation 2026-10-03T21:04:52.329709+00:00

Affected: Maven: org.apache.struts:struts2-core

Apache Struts versions prior to 2.3.32 and 2.5.10.1 contain incorrect exception handling and error-message generation during file-upload attempts using the Jakarta Multipart parser, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.

 https://cve.radiocsirt.org/vuln/gsd-2017-5638 gsd-2017-5638 2026-10-03T21:04:52.329734+00:00 gsd-2017-5638 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0461 WID-SEC-W-2023-0461 — Apache Struts: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2026-10-03T21:04:52.329745+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.