Description

Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI, related to improper handling of value attributes in (1) FileHandler.java, (2) HiddenHandler.java, (3) PasswordHandler.java, (4) RadioHandler.java, (5) ResetHandler.java, (6) SelectHandler.java, (7) SubmitHandler.java, and (8) TextFieldHandler.java.

Remediation

References

http://struts.apache.org/2.2.3/docs/version-notes-223.html

http://www.vupen.com/english/advisories/2011/1198

https://issues.apache.org/jira/browse/WW-3597

https://issues.apache.org/jira/browse/WW-3608

Related Vulnerabilities

CVE-2022-43433 Vulnerability in maven package io.jenkins.plugins:screenrecorder

CVE-2023-40826 Vulnerability in maven package org.pf4j:pf4j

CVE-2021-22119 Vulnerability in maven package org.springframework.security:spring-security-oauth2-client

CVE-2016-0706 Vulnerability in maven package org.apache.tomcat:catalina

CVE-2014-1904 Vulnerability in maven package org.springframework:spring-webmvc

Severity

Critical

Classification

CWE-79

Tags

Vendor Advisory Exploit