Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2015-1831

The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.

PublishedJul 16, 2015, 14:59

Published Bysecalert@redhat.com

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.apache.struts:struts2-core(Maven)2.0.02.3.20.1N/A

org.apache.struts.xwork:xwork-core(Maven)2.0.02.3.20.1N/A

References

http://www.securityfocus.com/bid/75940
http://www.securitytracker.com/id/1032985
https://struts.apache.org/docs/s2-024.html

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

7.5

Vector String

AV:N/AC:L/Au:N/C:P/I:P/A:P

Base SeverityUnknown

Version

2.0

Attack Vector (AV)