{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.2.9"}],"component":"struts:struts","cve_ids":["CVE-2016-1181"],"ecosystem":"Maven","epss":0.13122,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7jw3-5q4w-89qg","id":"tcs_01M5N8JJVBJS1YB37PDCJ5P1QN","modified_at":"2025-10-13T12:06:44.309871Z","published_at":"2022-05-13T01:25:20Z","references":["https://osv.dev/vulnerability/GHSA-7jw3-5q4w-89qg","https://nvd.nist.gov/vuln/detail/CVE-2016-1181","https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8","https://bugzilla.redhat.com/show_bug.cgi?id=1343538","https://github.com/apache/struts","https://security-tracker.debian.org/tracker/CVE-2016-1181","https://security.netapp.com/advisory/ntap-20180629-0006","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://jvn.jp/en/jp/JVN03188560/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-7jw3-5q4w-89qg#Maven/struts:struts","url":"https://osv.dev/vulnerability/GHSA-7jw3-5q4w-89qg"}],"summary":"Improper Input Validation in Apache Struts"}