CVE-2013-2248 in Struts
Summary
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
02/19/2013
Disclosure
07/19/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9568 | Apache Struts DefaultActionMapper input validation | 20 | Proof-of-Concept | Official fix | CVE-2013-2248 |