Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-2992

Fixed upstream EPSS 6%

Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.

Published 2020-02-27 · CVE record · OSV

Products: Apache Software Foundation Apache Struts

Fixed upstream

EcosystemPackageFixed in
Mavenorg.apache.struts:struts2-core2.3.20