CVE-2016-2162 in Struts
Summary
Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors involving language display.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/29/2016
Disclosure
04/12/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81372 | Apache Struts I18NInterceptor cross site scripting | 79 | Not defined | Official fix | CVE-2016-2162 |