CVE-2008-2025
Apache Struts Cross-site Scripting vulnerability
EPSS 7.9%
描述
Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "insufficient quoting of parameters."
如何修補 CVE-2008-2025
要修補 CVE-2008-2025,請將受影響套件升級到下列已修補版本。
- Maven/struts:struts—升級至 1.2.9-162.31.1 或更新版本
CVE-2008-2025 正在被利用嗎?
中等 — EPSS 為 7.9%,可持續追蹤但非最高優先。
受影響套件(1)
- from 0, < 1.2.9-162.31.1