CVE-2015-2992
Fixed upstream EPSS 6%
Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.
Products: Apache Software Foundation Apache Struts
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.struts:struts2-core | 2.3.20 |
Fixed upstream EPSS 6%
Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.
Products: Apache Software Foundation Apache Struts
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.struts:struts2-core | 2.3.20 |