Description

Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI, related to improper handling of value attributes in (1) FileHandler.java, (2) HiddenHandler.java, (3) PasswordHandler.java, (4) RadioHandler.java, (5) ResetHandler.java, (6) SelectHandler.java, (7) SubmitHandler.java, and (8) TextFieldHandler.java.

Remediation

References

http://www.vupen.com/english/advisories/2011/1198

https://issues.apache.org/jira/browse/WW-3608

https://issues.apache.org/jira/browse/WW-3597

http://struts.apache.org/2.2.3/docs/version-notes-223.html

Related Vulnerabilities

CVE-2022-43433 Vulnerability in maven package io.jenkins.plugins:screenrecorder

CVE-2017-17068 Vulnerability in npm package auth0-js

CVE-2020-15138 Vulnerability in maven package org.webjars:prismjs

CVE-2020-17150 Vulnerability in npm package typescript-tslint-plugin

CVE-2023-28443 Vulnerability in npm package directus

Severity

Critical

Classification

CWE-79

Tags

Vendor Advisory Exploit