Description
Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.
Remediation
References
https://struts.apache.org/docs/s2-025.html
https://bugzilla.redhat.com/show_bug.cgi?id=1260087
http://www.securityfocus.com/bid/76625
http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.html
http://jvn.jp/en/jp/JVN95989300/index.html
https://security.netapp.com/advisory/ntap-20180629-0003/
Related Vulnerabilities
CVE-2017-8443 Vulnerability in npm package kibana
CVE-2016-8749 Vulnerability in maven package org.apache.camel:camel-jackson
CVE-2023-50422 Vulnerability in maven package com.sap.cloud.security.xsuaa:spring-xsuaa
CVE-2021-21691 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-26480 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livedata-webjar