ghsa-56f8-g68r-j699
Vulnerability from github
Published
2022-05-17 05:35
Modified
2022-11-03 23:10
Summary
Cross-site Scripting in Apache Struts
Details
Multiple Cross-Site Scripting (XSS) in XWork generated error pages in Apache Struts. By default, XWork doesn't escape action's names in automatically generated error page, allowing for a successful XSS attack. When Dynamic Method Invocation (DMI) is enabled, the action name is generated dynamically base on request parameters. This allows to call non-existing page and method to produce error page with injected code as below. As of Struts 2.2.3 the action names are escaped when automatically generated error pages are rendered.
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.struts:struts2-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.2.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2011-1772"
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"github_reviewed": true,
"github_reviewed_at": "2022-11-03T23:10:43Z",
"nvd_published_at": "2011-05-13T17:05:00Z",
"severity": "LOW"
},
"details": "Multiple Cross-Site Scripting (XSS) in XWork generated error pages in Apache Struts. By default, XWork doesn\u0027t escape action\u0027s names in automatically generated error page, allowing for a successful XSS attack. When Dynamic Method Invocation (DMI) is enabled, the action name is generated dynamically base on request parameters. This allows to call non-existing page and method to produce error page with injected code as below. As of Struts 2.2.3 the action names are escaped when automatically generated error pages are rendered.",
"id": "GHSA-56f8-g68r-j699",
"modified": "2022-11-03T23:10:43Z",
"published": "2022-05-17T05:35:28Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1772"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/struts"
},
{
"type": "WEB",
"url": "https://issues.apache.org/jira/browse/WW-3579"
},
{
"type": "WEB",
"url": "http://jvn.jp/en/jp/JVN25435092/index.html"
},
{
"type": "WEB",
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000106"
},
{
"type": "WEB",
"url": "http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html"
},
{
"type": "WEB",
"url": "http://struts.apache.org/2.2.3/docs/version-notes-223.html"
},
{
"type": "WEB",
"url": "http://struts.apache.org/2.x/docs/s2-006.html"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "Cross-site Scripting in Apache Struts"
}
Loading...