Description

Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI, related to improper handling of value attributes in (1) FileHandler.java, (2) HiddenHandler.java, (3) PasswordHandler.java, (4) RadioHandler.java, (5) ResetHandler.java, (6) SelectHandler.java, (7) SubmitHandler.java, and (8) TextFieldHandler.java.

Remediation

References

http://struts.apache.org/2.2.3/docs/version-notes-223.html

http://www.vupen.com/english/advisories/2011/1198

https://issues.apache.org/jira/browse/WW-3597

https://issues.apache.org/jira/browse/WW-3608

Related Vulnerabilities

CVE-2020-24590 Vulnerability in maven package org.wso2.carbon.governance:org.wso2.carbon.governance.generic

CVE-2019-10446 Vulnerability in maven package org.jenkins-ci.plugins:vmanager-plugin

CVE-2023-34468 Vulnerability in maven package org.apache.nifi:nifi-hikari-dbcp-service

CVE-2015-7559 Vulnerability in maven package org.apache.activemq:activemq-all

CVE-2016-6651 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-common

Severity

Critical

Tags

Vendor Advisory Exploit CWE-79