CVE-2012-1592

CVSS v3.1 8.8 (High)

CVSS v2.0 6.5 (Medium)

EPSS 0.22 % (60^th)

Affected Products 1

Advisories 1

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

Weaknesses

CWE-434: Unrestricted Upload of File with Dangerous Type

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2019-12-05 21:15:11
(4 years ago)
Updated Date: 2023-02-13 00:24:01
(19 months ago)

Affected Products

Apache

Struts

Configuration #1

		CPE23	From	Up To
	Apache Struts 2.0.0	cpe:2.3:a:apache:struts:2.0.0