CVE-2008-6504
1 advisory.
Maven/com.opensymphony:xwork CVE-2008-6504: medium
Improper Input Validation in OpenSymphony XWork
Action: Upgrade com.opensymphony:xwork to 2.0.6 (2.0.x) or 2.1.2 (2.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.6 | - |
| 2.1.0 | 2.1.2 | - |
Fixed versions
| 2.0.6 | 2.1.2 |
Sources
- osv: GHSA-wxw2-2mx5-c5qf
- https://nvd.nist.gov/vuln/detail/CVE-2008-6504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46328
- http://fisheye6.atlassian.com/cru/CR-9
- http://issues.apache.org/struts/browse/WW-2692
- http://jira.opensymphony.com/browse/XW-641
- http://secunia.com/advisories/32495
- http://secunia.com/advisories/32497
- http://struts.apache.org/2.x/docs/s2-003.html
- http://web.archive.org/web/20081119232431/jira.opensymphony.com/browse/XW-641
- http://web.archive.org/web/20130807023152/https://fisheye6.atlassian.com/cru/CR-9
- http://www.securityfocus.com/bid/32101
- http://www.vupen.com/english/advisories/2008/3003
- http://www.vupen.com/english/advisories/2008/3004
CVE-2008-6504 · published · modified · JSON