CVE-2011-1772

CVE-2011-1772

Published · Updated

Follow this CVE+ Monitor org.apache.struts:struts2-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 33%
from disclosure to weaponsame day
Published on NVDMay 13
1st PoCMay 10
Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.