CVE-2010-1870
1 advisory.
Maven/org.apache.struts:struts2-core CVE-2010-1870: medium, EPSS 92.02%
Server side object manipulation in Apache Struts
Action: Upgrade org.apache.struts:struts2-core to 2.2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.1 | - |
Fixed versions
| 2.2.1 |
Sources
- osv: GHSA-x5fc-pgpx-59j5
- https://nvd.nist.gov/vuln/detail/CVE-2010-1870
- https://cwiki.apache.org/confluence/display/WW/S2-003
- https://github.com/apache/struts
- http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html
- http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16
- http://packetstormsecurity.com/files/159643/LISTSERV-Maestro-9.0-8-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2010/Jul/183
- http://seclists.org/fulldisclosure/2020/Oct/23
- http://struts.apache.org/2.2.1/docs/s2-005.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140709-struts2
CVE-2010-1870 · published · modified · JSON