{"action":"Upgrade org.apache.struts.xwork:xwork-core to 2.2.2 or later.","affected":[{"fixed":"2.2.2","introduced":"0"}],"component":"org.apache.struts.xwork:xwork-core","cve_ids":["CVE-2011-2088"],"ecosystem":"Maven","epss":0.0614,"exploited":false,"fixed_versions":["2.2.2"],"ghsa_id":"GHSA-9ccm-g362-2r35","id":"tcs_01M5N8PS3QE1EAQ4S2F67YZE4R","modified_at":"2024-12-02T05:41:39.877949Z","published_at":"2022-05-14T02:55:17Z","references":["https://osv.dev/vulnerability/GHSA-9ccm-g362-2r35","https://nvd.nist.gov/vuln/detail/CVE-2011-2088","https://github.com/apache/struts/commit/885ab3459e146ff830d1f7257f809f4a3dd4493a","https://issues.apache.org/jira/browse/WW-3579","https://web.archive.org/web/20110726113612/http://www.ventuneac.net/security-advisories/MVSA-11-006","https://web.archive.org/web/20201207174744/http://www.securityfocus.com/archive/1/518066/100/0/threaded","http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9ccm-g362-2r35","url":"https://osv.dev/vulnerability/GHSA-9ccm-g362-2r35"}],"summary":"XWork in Apache Struts Reveals Sensitive Information"}