org.apache.struts:struts2-core vulnerabilities

Latest version

2.5.25

First published

14 years ago

Latest version published

a month ago

Licenses detected

Continuously find & fix vulnerabilities like these in your dependencies. Test and protect your applications

Direct Vulnerabilities

Known vulnerabilities in the org.apache.struts:struts2-core package. This does not include vulnerabilities belonging to this package’s dependencies.

Report new vulnerabilities
Vulnerability Vulnerable versions Snyk patch Published
  • H
Unrestricted Upload of File with Dangerous Type
[,2.5) Not available 04 Sep, 2020
  • H
Denial of Service (DoS)
[2.0.0, 2.5.22) Not available 21 Aug, 2020
  • H
Remote Code Execution (RCE)
[2.0.0, 2.5.22) Not available 21 Aug, 2020
  • H
Remote Code Execution
[2.3.0, 2.3.35),[2.5.0, 2.5.17) Not available 22 Aug, 2018
  • M
Denial of Service (DoS)
[2.5-BETA1,2.5.14.1) Not available 04 Dec, 2017
  • M
Denial of Service (DoS)
[2.5,2.5.12) Not available 12 Sep, 2017
  • H
Denial of Service (DoS)
[2.3.7,2.3.33),[2.5,2.5.12) Not available 12 Sep, 2017
  • H
Denial of Service (DoS)
[2.3.7,2.3.34),[2.5,2.5.13) Not available 12 Sep, 2017
  • H
Denial of Service (DoS)
[2.3.7,2.3.34),[2.5,2.5.13) Not available 12 Sep, 2017
  • H
Arbitrary Command Execution
[,2.3.34),[2.4,2.5.13) Not available 06 Sep, 2017
  • H
Arbitrary Code Execution
[,2.3.34),[2.4,2.5.12) Not available 06 Sep, 2017
  • H
Arbitrary Code Execution
[2.3.7, 2.3.32),[2.5.0, 2.5.10.1) Not available 21 Mar, 2017
  • M
Arbitrary OGNL Statement Execution
[2.0.0, 2.2.1) Not available 25 Dec, 2016
  • M
Denial of Service (DoS)
[2.5, 2.5.13) Not available 05 Dec, 2016
  • H
Directory Traversal
[2.3.20,2.3.31) Not available 19 Oct, 2016
  • H
Improper Action Name Cleanup
[2.0.0, 2.3.29),[2.5, 2.5.1) Not available 19 Sep, 2016
  • H
Access Restriction Bypass
[2.3.20,2.3.29) Not available 21 Jun, 2016
  • H
Access Restriction Bypass
[2.3.20, 2.3.29) Not available 21 Jun, 2016
  • M
Regular Expression Denial of Service (ReDoS)
[2.3.20, 2.3.29),[2.5,2.5.1) Not available 20 Jun, 2016
  • H
Cross-site Request Forgery (CSRF)
[2.3.20,2.3.29) Not available 20 Jun, 2016
  • H
Arbitrary Command Execution
[2,2.3.20.2),[2.3.24,2.3.24.3),[2.3.28,2.3.28.1) Not available 02 Jun, 2016
  • H
Command Injection
[2.0.0, 2.3.20.2),[2.3.24, 2.3.24.2),[2.3.28, 2.3.28.1) Not available 22 Apr, 2016
  • H
Arbitrary Code Execution
[2,2.3.20.2),[2.3.24,2.3.24.2),[2.3.28,2.3.28.1) Not available 22 Apr, 2016
  • M
Cross-site Scripting (XSS)
[,2.3.28) Not available 16 Mar, 2016
  • L
Cross-site Scripting (XSS)
[2,2.3.20) Not available 19 Oct, 2015
  • M
Cross-site Scripting (XSS)
[2.0.0, 2.3.20) Not available 26 Aug, 2015
  • H
Manipulation of Struts' internals
[2.0.0, 2.3.24.1) Not available 01 Jul, 2015
  • M
Cross-site Request Forgery (CSRF)
[2.0.0, 2.3.20) Not available 08 Dec, 2014
  • H
Arbitrary Code Exectuion
[,2.2.3.1) Not available 17 Jun, 2014
Versions
Version Published Licenses Direct Vulnerabilities
org.apache.struts:struts2-core 2.5.25
Latest
17 Sep, 2020 Apache-2.0
  • 0 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.22 17 Nov, 2019 Apache-2.0
  • 0 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.20 09 Jan, 2019 Apache-2.0
  • 2 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.3.37 30 Dec, 2018 Apache-2.0
  • 3 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.3.36 22 Sep, 2018 Apache-2.0
  • 3 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.18 18 Sep, 2018 Apache-2.0
  • 2 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.17 14 Aug, 2018 Apache-2.0
  • 2 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.3.35 24 Jul, 2018 Apache-2.0
  • 3 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.16 02 Mar, 2018 Apache-2.0
  • 3 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.14.1 29 Nov, 2017 Apache-2.0
  • 3 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.14 14 Nov, 2017 Apache-2.0
  • 3 H
  • 1 M
  • 0 L
org.apache.struts:struts2-core 2.3.34 05 Sep, 2017 Apache-2.0
  • 4 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.13 23 Aug, 2017 Apache-2.0
  • 3 H
  • 1 M
  • 0 L
org.apache.struts:struts2-core 2.3.33 07 Jul, 2017 Apache-2.0
  • 8 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.12 06 Jul, 2017 Apache-2.0
  • 6 H
  • 2 M
  • 0 L
org.apache.struts:struts2-core 2.3.32 06 Mar, 2017 Apache-2.0
  • 9 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.10.1 06 Mar, 2017 Apache-2.0
  • 8 H
  • 3 M
  • 0 L
org.apache.struts:struts2-core 2.5.10 27 Jan, 2017 Apache-2.0
  • 9 H
  • 3 M
  • 0 L
org.apache.struts:struts2-core 2.5.8 06 Dec, 2016 Apache-2.0
  • 9 H
  • 3 M
  • 0 L
org.apache.struts:struts2-core 2.5.5 11 Oct, 2016 Apache-2.0
  • 9 H
  • 3 M
  • 0 L
org.apache.struts:struts2-core 2.3.31 05 Oct, 2016 Apache-2.0
  • 10 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.2 07 Jul, 2016 Apache-2.0
  • 9 H
  • 3 M
  • 0 L
org.apache.struts:struts2-core 2.3.30 07 Jul, 2016 Apache-2.0
  • 11 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5.1 14 Jun, 2016 Apache-2.0
  • 9 H
  • 3 M
  • 0 L
org.apache.struts:struts2-core 2.3.29 14 Jun, 2016 Apache-2.0
  • 11 H
  • 0 M
  • 0 L
org.apache.struts:struts2-core 2.5 05 May, 2016 Apache-2.0
  • 10 H
  • 4 M
  • 0 L
org.apache.struts:struts2-core 2.3.24.3 20 Apr, 2016 Apache-2.0
  • 15 H
  • 2 M
  • 0 L
org.apache.struts:struts2-core 2.3.20.3 20 Apr, 2016 Apache-2.0
  • 16 H
  • 2 M
  • 0 L
org.apache.struts:struts2-core 2.3.28.1 19 Apr, 2016 Apache-2.0
  • 15 H
  • 1 M
  • 0 L
org.apache.struts:struts2-core 2.3.28 18 Mar, 2016 Apache-2.0
  • 18 H
  • 1 M
  • 0 L
org.apache.struts:struts2-core 2.5-BETA3
Pre-release
21 Jan, 2016 Apache-2.0
  • 5 H
  • 1 M
  • 0 L
org.apache.struts:struts2-core 2.5-BETA2
Pre-release
28 Sep, 2015 Apache-2.0
  • 5 H
  • 1 M
  • 0 L
org.apache.struts:struts2-core 2.3.24.1 22 Sep, 2015 Apache-2.0
  • 18 H
  • 2 M
  • 0 L
org.apache.struts:struts2-core 2.5-BETA1
Pre-release
17 Jul, 2015 Apache-2.0
  • 5 H
  • 1 M
  • 0 L
org.apache.struts:struts2-core 2.3.20.1 06 May, 2015 Apache-2.0
  • 19 H
  • 2 M
  • 0 L
org.apache.struts:struts2-core 2.3.24 03 May, 2015 Apache-2.0
  • 19 H
  • 2 M
  • 0 L
org.apache.struts:struts2-core 2.3.20 21 Nov, 2014 Apache-2.0
  • 19 H
  • 2 M
  • 0 L
org.apache.struts:struts2-core 2.3.16.3 02 May, 2014 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.16.2 24 Apr, 2014 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.16.1 01 Mar, 2014 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.16 30 Nov, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.15.3 15 Oct, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.15.2 18 Sep, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.15.1 14 Jul, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.15 14 Jun, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.14.3 03 Jun, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.14.2 24 May, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.14.1 18 Apr, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.14 28 Mar, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.12 06 Mar, 2013 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.8 17 Dec, 2012 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.7 06 Nov, 2012 Apache-2.0
  • 15 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.4.1 03 Aug, 2012 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.4 12 May, 2012 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.3 16 Apr, 2012 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.1.2 20 Jan, 2012 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.1.1 25 Dec, 2011 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.3.1 08 Dec, 2011 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.2.3.1 05 Sep, 2011 Apache-2.0
  • 10 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.2.3 08 Apr, 2011 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.2.1.1 14 Dec, 2010 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.2.1 17 Jul, 2010 Apache-2.0
  • 11 H
  • 3 M
  • 1 L
org.apache.struts:struts2-core 2.1.8.1 11 Nov, 2009 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.1.8 29 Sep, 2009 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.1.6 13 Jan, 2009 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.14 22 Nov, 2008 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.12 20 Oct, 2008 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.11.2 29 Jun, 2008 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.1.2 25 May, 2008 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.11.1 04 Mar, 2008 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.11 23 Oct, 2007 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.9 24 Jul, 2007 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.8 11 Jun, 2007 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.6 23 Feb, 2007 Apache-2.0
  • 11 H
  • 4 M
  • 1 L
org.apache.struts:struts2-core 2.0.5 10 Feb, 2007 Apache-2.0
  • 11 H
  • 4 M
  • 1 L