https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:33:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05999 bdu:2022-05999 https://cve.radiocsirt.org/vuln/bdu:2022-05999 https://cve.radiocsirt.org/vuln/certa-2013-avi-430 certa-2013-avi-430 https://cve.radiocsirt.org/vuln/certa-2013-avi-430 https://cve.radiocsirt.org/vuln/euvd-2026-256481 EUVD-2026-256481 https://cve.radiocsirt.org/vuln/euvd-2026-256481 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2251 <p>Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.</p> <p>Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2251 https://cve.radiocsirt.org/vuln/ghsa-47qp-8v9g-39hp <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with &#34;action:&#34; or &#34;redirect:&#34;, followed by a desired navigational target expression. This mechanism was intended to help with attaching navigational information to buttons within forms.</p> <p>In Struts 2 before 2.3.15.1 the information following &#34;action:&#34;, &#34;redirect:&#34; or &#34;redirectAction:&#34; is not properly sanitized. Since said information will be evaluated as OGNL expression against the value stack, this introduces the possibility to inject server side code.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with &#34;action:&#34; or &#34;redirect:&#34;, followed by a desired navigational target expression. This mechanism was intended to help with attaching navigational information to buttons within forms.</p> <p>In Struts 2 before 2.3.15.1 the information following &#34;action:&#34;, &#34;redirect:&#34; or &#34;redirectAction:&#34; is not properly sanitized. Since said information will be evaluated as OGNL expression against the value stack, this introduces the possibility to inject server side code.</p> https://cve.radiocsirt.org/vuln/ghsa-47qp-8v9g-39hp https://cve.radiocsirt.org/vuln/gsd-2013-2251 gsd-2013-2251 https://cve.radiocsirt.org/vuln/gsd-2013-2251 https://cve.radiocsirt.org/vuln/jvndb-2013-003469 <p>Apache Struts contains a remote command execution vulnerability. Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts contains a remote command execution vulnerability. This issue is the same issue that the developer published as S2-016 on July 16, 2013 Note that attacks leveraging this vulnerability have been confirmed. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Struts contains a remote command execution vulnerability. Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts contains a remote command execution vulnerability. This issue is the same issue that the developer published as S2-016 on July 16, 2013 Note that attacks leveraging this vulnerability have been confirmed. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2013-003469