https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:15:35.013230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-01689 bdu:2016-01689 2026-10-03T03:15:35.107121+00:00 bdu:2016-01689 https://cve.radiocsirt.org/vuln/certfr-2019-avi-403 certfr-2019-avi-403 — De multiples vulnérabilités ont été découvertes dans Apache Struts. Certaines d'entre elles permettent à un attaquant d… 2026-10-03T03:15:35.107156+00:00 certfr-2019-avi-403 https://cve.radiocsirt.org/vuln/cnvd-2016-04089 cnvd-2016-04089 2026-10-03T03:15:35.107175+00:00 cnvd-2016-04089 https://cve.radiocsirt.org/vuln/euvd-2026-84423 EUVD-2026-84423 2026-10-03T03:15:35.107187+00:00 EUVD-2026-84423 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4465 fkie_cve-2016-4465 2026-10-03T03:15:35.107198+00:00

The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.

 https://cve.radiocsirt.org/vuln/ghsa-xg75-68x3-7p3q GHSA-xg75-68x3-7p3q — Apache Struts vulnerable to possible DoS attack when using URLValidator 2026-10-03T03:15:35.107236+00:00

Affected: Maven: org.apache.struts:struts2-core

The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.13 allows remote attackers to cause a denial of service via a null value for a URL field.

 https://cve.radiocsirt.org/vuln/gsd-2016-4465 gsd-2016-4465 2026-10-03T03:15:35.107260+00:00 gsd-2016-4465 https://cve.radiocsirt.org/vuln/jvndb-2016-000114 jvndb-2016-000114 2026-10-03T03:15:35.107271+00:00

Apache Struts provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain a denial-of-service (DoS) vulnerability due to an issue in URLValidator. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.