Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:12:38 +0000 cnvd-2017-31531 https://cve.radiocsirt.org/vuln/cnvd-2017-31531 cnvd-2017-31531 https://cve.radiocsirt.org/vuln/cnvd-2017-31531 EUVD-2026-184168 https://cve.radiocsirt.org/vuln/euvd-2026-184168 EUVD-2026-184168 https://cve.radiocsirt.org/vuln/euvd-2026-184168 fkie_cve-2017-9804 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9804 <p>In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. NOTE: this vulnerability exists because of an incomplete fix for S2-047 / CVE-2017-7672.</p> <p>In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. NOTE: this vulnerability exists because of an incomplete fix for S2-047 / CVE-2017-7672.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9804 GHSA-x5x7-3v85-wpc4 — Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used https://cve.radiocsirt.org/vuln/ghsa-x5x7-3v85-wpc4 <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. NOTE: this vulnerability exists because of an incomplete fix for S2-047 / CVE-2017-7672.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. NOTE: this vulnerability exists because of an incomplete fix for S2-047 / CVE-2017-7672.</p> https://cve.radiocsirt.org/vuln/ghsa-x5x7-3v85-wpc4 gsd-2017-9804 https://cve.radiocsirt.org/vuln/gsd-2017-9804 gsd-2017-9804 https://cve.radiocsirt.org/vuln/gsd-2017-9804