https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:57:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00403 bdu:2015-00403 https://cve.radiocsirt.org/vuln/bdu:2015-00403 https://cve.radiocsirt.org/vuln/certfr-2014-avi-214 certfr-2014-avi-214 https://cve.radiocsirt.org/vuln/certfr-2014-avi-214 https://cve.radiocsirt.org/vuln/euvd-2026-96673 EUVD-2026-96673 https://cve.radiocsirt.org/vuln/euvd-2026-96673 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0116 <p>CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and modify session state via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0113.</p> <p>CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and modify session state via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0113.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0116 https://cve.radiocsirt.org/vuln/ghsa-hmhq-382q-mp56 <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and modify session state via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0113.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>CookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to &#34;manipulate&#34; the ClassLoader and modify session state via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0113.</p> https://cve.radiocsirt.org/vuln/ghsa-hmhq-382q-mp56 https://cve.radiocsirt.org/vuln/gsd-2014-0116 gsd-2014-0116 https://cve.radiocsirt.org/vuln/gsd-2014-0116