https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:00:55.299622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-02058 bdu:2017-02058 2026-10-07T21:00:55.305231+00:00 bdu:2017-02058 https://cve.radiocsirt.org/vuln/certfr-2017-avi-285 certfr-2017-avi-285 — Une vulnérabilité a été corrigée dans <span class="textit">Apache Struts</span>. Elle permet à un attaquant de provoque… 2026-10-07T21:00:55.305273+00:00 certfr-2017-avi-285 https://cve.radiocsirt.org/vuln/cnvd-2017-25267 cnvd-2017-25267 2026-10-07T21:00:55.305305+00:00 cnvd-2017-25267 https://cve.radiocsirt.org/vuln/euvd-2026-256309 EUVD-2026-256309 2026-10-07T21:00:55.305329+00:00 EUVD-2026-256309 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9805 fkie_cve-2017-9805 2026-10-07T21:00:55.305350+00:00

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

 https://cve.radiocsirt.org/vuln/ghsa-gg9m-fj3v-r58c GHSA-gg9m-fj3v-r58c — REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type fi… 2026-10-07T21:00:55.305392+00:00

Affected: Maven: org.apache.struts:struts2-rest-plugin

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

 https://cve.radiocsirt.org/vuln/gsd-2017-9805 gsd-2017-9805 2026-10-07T21:00:55.305430+00:00 gsd-2017-9805