Approved changes feed: RSS · Atom

cpe:2.3:a:apache:struts2-showcase:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductStruts2 Showcase (5d0e4221-2c3e-528f-956c-2f3786cb5c02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/struts purl2cpe 2026-06-01 10:14:25.298781
pkg:github/apache/struts purl2cpe 2026-06-01 10:14:25.298785
pkg:maven/org.apache.struts/struts2-showcase purl2cpe 2026-06-01 10:14:25.298788

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1965 vulnerable 2026-06-08 05:03:57.606649 Details available
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
Published: 2013-07-10T19:00:00.000Z
Updated: 2024-08-06T15:20:37.522Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.