CVE-2008-6682
1 advisory.
Maven/org.apache.struts:struts2-core CVE-2008-6682: medium, EPSS 5.61%
Apache Struts is vulnerable to Cross-site Scripting
Action: Upgrade org.apache.struts:struts2-core to 2.0.11.1 (2.0.x) or 2.1.1 (2.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.11.1 | - |
| 2.1.0 | 2.1.1 | - |
Fixed versions
| 2.0.11.1 | 2.1.1 |
Sources
- osv: GHSA-jgcr-9c2q-rvp8
- https://nvd.nist.gov/vuln/detail/CVE-2008-6682
- https://github.com/apache/struts/commit/09147ffad2b3046ed21af0f524c5088e2ac551e6
- https://github.com/apache/struts/commit/bd3f2f59c9b09f70aed3ebab6bb69b464ee2d6cb
- https://github.com/apache/struts/commit/dae026a0f0511f83852053bae9d5a622e7f80486
- https://github.com/apache/struts
- https://issues.apache.org/struts/browse/WW-2414
- https://issues.apache.org/struts/browse/WW-2427
- https://web.archive.org/web/20080610075918/http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html
- https://web.archive.org/web/20080611112834/http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html
- https://web.archive.org/web/20200229155553/http://www.securityfocus.com/bid/34686
CVE-2008-6682 · published · modified · JSON