https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:19:01.693182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-403 certfr-2019-avi-403 — De multiples vulnérabilités ont été découvertes dans Apache Struts. Certaines d'entre elles permettent à un attaquant d… 2026-10-03T09:19:01.698278+00:00 certfr-2019-avi-403 https://cve.radiocsirt.org/vuln/euvd-2026-131374 EUVD-2026-131374 2026-10-03T09:19:01.698316+00:00 EUVD-2026-131374 https://cve.radiocsirt.org/vuln/fkie_cve-2008-6504 fkie_cve-2008-6504 2026-10-03T09:19:01.698331+00:00

ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.

 https://cve.radiocsirt.org/vuln/ghsa-wxw2-2mx5-c5qf GHSA-wxw2-2mx5-c5qf — Improper Input Validation in OpenSymphony XWork 2026-10-03T09:19:01.698360+00:00

Affected: Maven: com.opensymphony:xwork

ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.

 https://cve.radiocsirt.org/vuln/gsd-2008-6504 gsd-2008-6504 2026-10-03T09:19:01.698385+00:00 gsd-2008-6504