Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-rest-showcase/orders.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Struts多个跨站脚本漏洞
Vulnerability Description
Apache是一款流行免费的开放源代码WEB服务器，运行在多种Unix和Linux系统平台下，也可运行于Windows平台下。 Apache Struts 2.0.14版本和2.2.3版本中存在多个跨站脚本漏洞（XSS）。远程攻击者可利用这些漏洞借助struts2-showcase/person/editPerson.action的（1）name或（2）lastName参数或（3）struts2-rest-showcase/orders.的clientName参数，注入任意web脚本代码或HTML。
CVSS Information
N/A
Vulnerability Type
N/A