Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
6.5
CVSSv2

CVE-2012-1592

CVSSv4: NA | CVSSv3: 8.8 | CVSSv2: 6.5 | VMScore: 980 | EPSS: 0.00792 | KEV: Not Included
Published: 05/12/2019 Updated: 21/11/2024

Vulnerability Summary

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache struts 2.0.0

Exploits

Exploit DB: Apache Struts 2.0 - 'XSLTResult.java' Arbitrary File Upload
source: wwwsecurityfocuscom/bid/52702/info Apache Struts2 is prone to a remote arbitrary file-upload vulnerability because it fails to sufficiently sanitize user-supplied input Attackers can exploit this issue to upload arbitrary code and run it in the context of the webserver process This may facilitate unauthorized access or privileg ...

References

CWE-434https://nvd.nist.govhttps://www.exploit-db.com/exploits/37009/https://www.first.org/epsshttp://www.openwall.com/lists/oss-security/2012/03/28/12https://access.redhat.com/security/cve/cve-2012-1592https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2%40%3Cissues.struts.apache.org%3Ehttps://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc%40%3Cissues.struts.apache.org%3Ehttps://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b%40%3Cissues.struts.apache.org%3Ehttps://security-tracker.debian.org/tracker/CVE-2012-1592http://www.openwall.com/lists/oss-security/2012/03/28/12https://access.redhat.com/security/cve/cve-2012-1592https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2%40%3Cissues.struts.apache.org%3Ehttps://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc%40%3Cissues.struts.apache.org%3Ehttps://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b%40%3Cissues.struts.apache.org%3Ehttps://security-tracker.debian.org/tracker/CVE-2012-1592
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
desktop browserurbancode velocityCVE-2024-57932CVE-2025-21655CVE-2024-12084CVE-2023-34960unauthorizedCSRFCVE-2024-57913privilegeCVE-2025-21649itsourcecodecp-xr-de21-s router
Home
/
Search Results
/
CVE-2012-1592
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook