{"action":"Upgrade org.apache.struts:struts2-core to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2010-1870"],"ecosystem":"Maven","epss":0.92015,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-x5fc-pgpx-59j5","id":"tcs_01M5N9HS7WMSE8Z77E27NF8FHE","modified_at":"2024-12-02T05:43:40.772642Z","published_at":"2022-05-13T01:14:26Z","references":["https://osv.dev/vulnerability/GHSA-x5fc-pgpx-59j5","https://nvd.nist.gov/vuln/detail/CVE-2010-1870","https://cwiki.apache.org/confluence/display/WW/S2-003","https://github.com/apache/struts","http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html","http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16","http://packetstormsecurity.com/files/159643/LISTSERV-Maestro-9.0-8-Remote-Code-Execution.html","http://seclists.org/fulldisclosure/2010/Jul/183","http://seclists.org/fulldisclosure/2020/Oct/23","http://struts.apache.org/2.2.1/docs/s2-005.html","http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140709-struts2"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-x5fc-pgpx-59j5","url":"https://osv.dev/vulnerability/GHSA-x5fc-pgpx-59j5"}],"summary":"Server side object manipulation in Apache Struts"}