Maven package
org.apache.struts/struts2-convention-plugin
pkg:maven/org.apache.struts/struts2-convention-plugin
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2016-6795 | Cri | 9.8 | >= 2.3.0, < 2.3.31 | 2.3.31 | Sep 20, 2017 | In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a special URL which will be used for path traversal and execution of arbitrary code on server side. |
- affected >= 2.3.0, < 2.3.31fixed 2.3.31
In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a special URL which will be used for path traversal and execution of arbitrary code on server side.