CVE-2016-2162 in Apache Struts
요약 (영어)
Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors involving language display.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
예약하다
2016. 01. 29.
공개
2016. 04. 12.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 81372 | Apache Struts I18NInterceptor 크로스 사이트 스크립팅 | 79 | 정의되지 않음 | 공식 수정 | CVE-2016-2162 |