CVE-2015-2992

Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2020-02-27

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Struts (Apache)
• Apache Struts (Apache Software Foundation)

References

• http://jvn.jp/en/jp/JVN88408929/index.html
• http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000124.html
• http://www.securityfocus.com/bid/76624
• https://security.netapp.com/advisory/ntap-20200330-0001/