CVE-2013-6348 in Apache Struts
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to (1) actionNames.action and (2) showConfig.action in config-browser/.
Reservation
11/02/2013
Disclosure
11/02/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65410 | Apache Struts cross site scripting | 79 | Not defined | Not defined | CVE-2013-6348 |