{"action":"Upgrade org.apache.struts:struts2-parent to 2.1.2 (2.1.x) or 2.2.3.1 (2.2.x) or later.","affected":[{"fixed":"2.1.2","introduced":"0"},{"fixed":"2.2.3.1","introduced":"2.2"}],"component":"org.apache.struts:struts2-parent","cve_ids":["CVE-2012-1006"],"ecosystem":"Maven","epss":0.56607,"exploited":false,"fixed_versions":["2.1.2","2.2.3.1"],"ghsa_id":"GHSA-cmpm-jg8r-fv37","id":"tcs_01M5N8SR6Q6CVSFQJVFH9SMMJA","modified_at":"2024-12-06T05:38:31.315552Z","published_at":"2022-05-17T01:49:11Z","references":["https://osv.dev/vulnerability/GHSA-cmpm-jg8r-fv37","https://nvd.nist.gov/vuln/detail/CVE-2012-1006","https://exchange.xforce.ibmcloud.com/vulnerabilities/72888","https://web.archive.org/web/20120219225953/http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt","https://web.archive.org/web/20131013214245/http://secpod.org/blog/?p=450","https://web.archive.org/web/20200229131840/http://www.securityfocus.com/bid/51902"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cmpm-jg8r-fv37","url":"https://osv.dev/vulnerability/GHSA-cmpm-jg8r-fv37"}],"summary":"Apache Struts Multiple Cross-site Scripting Vulnerabilities"}