https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T15:17:22.439695+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05908 bdu:2022-05908 2026-10-28T15:17:22.443095+00:00 bdu:2022-05908 https://cve.radiocsirt.org/vuln/euvd-2026-112386 EUVD-2026-112386 2026-10-28T15:17:22.443125+00:00 EUVD-2026-112386 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4386 fkie_cve-2012-4386 2026-10-28T15:17:22.443139+00:00

The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.

 https://cve.radiocsirt.org/vuln/ghsa-2rvh-q539-q33v GHSA-2rvh-q539-q33v — Cross-Site Request Forgery in Apache Struts 2026-10-28T15:17:22.443167+00:00

Affected: Maven: org.apache.struts:struts2-core

The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.

 https://cve.radiocsirt.org/vuln/gsd-2012-4386 gsd-2012-4386 2026-10-28T15:17:22.443190+00:00 gsd-2012-4386