PT-2011-3578 · Apache · Apache Struts

Dustin Digmann · Published 2011-05-13 · Updated 2022-05-17 · CVE-2011-2087

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.2.3

Description The issue allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI. This is related to improper handling of value attributes in various component handlers, including FileHandler.java, HiddenHandler.java, PasswordHandler.java, RadioHandler.java, ResetHandler.java, SelectHandler.java, SubmitHandler.java, and TextFieldHandler.java.

Recommendations For versions prior to 2.2.3, update to version 2.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the .action URI to minimize the risk of exploitation. Avoid using arbitrary parameter values in the affected URI until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-2087

GHSA-5PGJ-R7C6-7C7W

Affected Products

Apache Struts

References · 8

• 🔥 https://issues.apache.org/jira/browse/WW-3597 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2087 · Security Note
• http://vupen.com/english/advisories/2011/1198 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5pgj-r7c6-7c7w · Vendor Advisory
• https://github.com/apache/struts · Note
• https://github.com/apache/struts/commit/1736b56db702c6639a6d5ae1146dba5a262e3344 · Note
• https://issues.apache.org/jira/browse/WW-3608 · Note
• http://struts.apache.org/2.2.3/docs/version-notes-223.html · Note