CVE-2015-1831

CVE-2015-1831

Published · Updated

Follow this CVE+ Monitor org.apache.struts:struts2-core+ Monitor org.apache.struts.xwork:xwork-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 6.3%
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
Affected products
n/a · n/a