Red Hat Security Advisory

RHSA-2006:0281

struts security update for Red Hat Application Server

Released 2006-05-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Application Server 3AS
Red Hat Application Server v2 4AS

Fixes 3 records

TI-2006-01497 CVE-2006-1547 · GHSA-7qwv-cwgj-c8rj

ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7…

CRITICAL 90KEV

ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.54635 Published 2006-03-30 Fixed in 1.2.9 CWE-749

TI-2006-01496 CVE-2006-1546 · GHSA-vf8g-mpmw-qv87

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass…

MEDIUM 42

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled bu…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06286 Published 2006-03-30 Fixed in 1.2.9 CWE-20

TI-2006-01498 CVE-2006-1548 · GHSA-p3vw-fvwx-qcv5

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2)…

LOW 28

Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05453 Published 2006-03-30 Fixed in 1.2.9 CWE-79