Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:15:26 +0000 bdu:2017-01273 https://cve.radiocsirt.org/vuln/bdu:2017-01273 bdu:2017-01273 https://cve.radiocsirt.org/vuln/bdu:2017-01273 certfr-2017-ale-004 — Une vulnérabilité a été découverte dans <span class="textit">Apache Struts</span>. Elle permet à un attaquant de provoq… https://cve.radiocsirt.org/vuln/certfr-2017-ale-004 certfr-2017-ale-004 https://cve.radiocsirt.org/vuln/certfr-2017-ale-004 certfr-2017-avi-071 — Une vulnérabilité a été corrigée dans <span class="textit">Apache Struts</span>. Elle permet à un attaquant de provoque… https://cve.radiocsirt.org/vuln/certfr-2017-avi-071 certfr-2017-avi-071 https://cve.radiocsirt.org/vuln/certfr-2017-avi-071 cnvd-2017-02474 https://cve.radiocsirt.org/vuln/cnvd-2017-02474 cnvd-2017-02474 https://cve.radiocsirt.org/vuln/cnvd-2017-02474 EUVD-2026-256361 https://cve.radiocsirt.org/vuln/euvd-2026-256361 EUVD-2026-256361 https://cve.radiocsirt.org/vuln/euvd-2026-256361 fkie_cve-2017-5638 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5638 <p>The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.</p> <p>The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5638 GHSA-j77q-2qqg-6989 — Apache Struts vulnerable to remote arbitrary command execution due to improper input validation https://cve.radiocsirt.org/vuln/ghsa-j77q-2qqg-6989 <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>Apache Struts versions prior to 2.3.32 and 2.5.10.1 contain incorrect exception handling and error-message generation during file-upload attempts using the Jakarta Multipart parser, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>Apache Struts versions prior to 2.3.32 and 2.5.10.1 contain incorrect exception handling and error-message generation during file-upload attempts using the Jakarta Multipart parser, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.</p> https://cve.radiocsirt.org/vuln/ghsa-j77q-2qqg-6989 gsd-2017-5638 https://cve.radiocsirt.org/vuln/gsd-2017-5638 gsd-2017-5638 https://cve.radiocsirt.org/vuln/gsd-2017-5638 WID-SEC-W-2023-0461 — Apache Struts: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0461 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0461