https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:16:58 +0000 https://cve.radiocsirt.org/vuln/cve-2018-11776 <p><strong>Affected:</strong> Apache Software Foundation Apache Struts</p> <p>Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn&#39;t have value and action set and in same time, its upper package have no or wildcard namespace.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Struts</p> <p>Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn&#39;t have value and action set and in same time, its upper package have no or wildcard namespace.</p> https://cve.radiocsirt.org/vuln/cve-2018-11776