{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.2.7"}],"component":"org.apache.struts:struts-core","cve_ids":["CVE-2005-3745"],"ecosystem":"Maven","epss":0.25707,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9cjh-qmvx-436c","id":"tcs_01M5N8PSX6C21KWMVD3ZDV5V4M","modified_at":"2023-11-08T03:56:46.055411Z","published_at":"2022-05-01T02:20:38Z","references":["https://osv.dev/vulnerability/GHSA-9cjh-qmvx-436c","https://nvd.nist.gov/vuln/detail/CVE-2005-3745","https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3@%3Cissues.struts.apache.org%3E","https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db@%3Cissues.struts.apache.org%3E","https://web.archive.org/web/20051230061138/http://www.hacktics.com/AdvStrutsNov05.html","https://web.archive.org/web/20060315133810/http://securitytracker.com/alerts/2005/Nov/1015257.html","https://web.archive.org/web/20060408105414/http://www.securityfocus.com/bid/15512","https://web.archive.org/web/20201125023452/http://www.securityfocus.com/archive/1/417296/30/0/threaded","https://web.archive.org/web/20201207010315/https://cxsecurity.com/issue/WLB-2005110055","http://www.redhat.com/support/errata/RHSA-2006-0157.html","http://www.redhat.com/support/errata/RHSA-2006-0161.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9cjh-qmvx-436c","url":"https://osv.dev/vulnerability/GHSA-9cjh-qmvx-436c"}],"summary":"Apache Struts Cross-site scripting Vulnerability"}