CVE-2005-3745
NoneCVSS
—
EPSS
25.7%
Published
Nov 22, 2005
CISA due date
—
The record
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.struts:struts-core | 0 | No fix |
Related vulnerabilities
- CVE-2016-1182 ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the… Also affects org.apache.struts:struts-core
- CVE-2016-1181 ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access… Also affects org.apache.struts:struts-core
- CVE-2015-0899 The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote… Also affects org.apache.struts:struts-core
- CVE-2012-1007 Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote… Also affects org.apache.struts:struts-core