← All advisories

Critical severityNVD Advisory· Published Nov 1, 2019· Updated Aug 6, 2024

CVE-2011-3923

CVE-2011-3923

Description

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.struts:struts2-coreMaven	>= 2.0.0, < 2.3.1.2	2.3.1.2

Affected products

2

ghsa-coords
pkg:maven/org.apache.struts/struts2-core
Range: >= 2.0.0, < 2.3.1.2
Apache/Strutsv5
Range: 2.3.1.2

Patches

Vulnerability mechanics

References

12

www.exploit-db.com/exploits/24874mitreexploitx_refsource_EXPLOIT-DB
github.com/advisories/GHSA-j68f-8h6p-9h5qghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2011-3923ghsaADVISORY
blog.o0o.nu/2012/01/cve-2011-3923-yet-another-struts2.htmlghsaWEB
seclists.org/fulldisclosure/2014/Jul/38mitrex_refsource_MISC
struts.apache.org/development/2.x/docs/s2-009.htmlghsaWEB
www.securityfocus.com/bid/51628mitrevdb-entryx_refsource_BID
www.securitytracker.com/idmitrex_refsource_MISC
bugzilla.redhat.com/show_bug.cgighsax_refsource_MISCWEB
exchange.xforce.ibmcloud.com/vulnerabilities/72585ghsavdb-entryx_refsource_XFWEB
security-tracker.debian.org/tracker/CVE-2011-3923ghsax_refsource_MISCWEB
web.archive.org/web/20140725074137/http://seclists.org/fulldisclosure/2014/Jul/38ghsaWEB

News mentions

0

No linked articles in our index yet.