{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.1","last_affected":"1.2.9"}],"component":"struts:struts","cve_ids":["CVE-2015-0899"],"ecosystem":"Maven","epss":0.21261,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cvvx-r33m-v7pq","id":"tcs_01M5N8TD1AP2NNBPY417MD0VJT","modified_at":"2025-10-13T12:07:03.465378Z","published_at":"2022-05-14T03:15:11Z","references":["https://osv.dev/vulnerability/GHSA-cvvx-r33m-v7pq","https://nvd.nist.gov/vuln/detail/CVE-2015-0899","https://en.osdn.jp/projects/terasoluna/wiki/StrutsPatch2-EN","https://github.com/apache/struts","https://security.netapp.com/advisory/ntap-20180629-0006","http://jvn.jp/en/jp/JVN86448949/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2015-000042","http://www.debian.org/security/2016/dsa-3536","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cvvx-r33m-v7pq#Maven/struts:struts","url":"https://osv.dev/vulnerability/GHSA-cvvx-r33m-v7pq"}],"summary":"Improper Input Validation in Apache Struts"}