CVE-2016-6795 Path Traversal in Apache Struts
CriticalCVSS 9.8
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a special URL which will be used for path traversal and execution of arbitrary code on server side.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.struts/struts2-convention-plugin(Maven) | >= 2.3.0, < 2.3.31 | 2.3.31 |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.1.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.1.2 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.12 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.14 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.14.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.14.2 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.14.3 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.15 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.15.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.15.2 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.15.3 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.16 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.16.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.16.2 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.16.3 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.20 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.20.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.20.3 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.24 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.24.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.24.3 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.28 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.28.1 | No fix listed |
Show 31 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.29 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.3 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.30 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.4 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.4.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.7 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.3.8 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | >= 2.5.0, < 2.5.5 | 2.5.5 |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.5 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.5.1 | No fix listed |
| org.apache.struts/struts2-convention-plugin(Maven) | = 2.5.2 | No fix listed |
| apache struts | = 2.3.20 | No fix listed |
| apache struts | = 2.3.20.1 | No fix listed |
| apache struts | = 2.3.20.2 | No fix listed |
| apache struts | = 2.3.20.3 | No fix listed |
| apache struts | = 2.3.21 | No fix listed |
| apache struts | = 2.3.22 | No fix listed |
| apache struts | = 2.3.23 | No fix listed |
| apache struts | = 2.3.24 | No fix listed |
| apache struts | = 2.3.24.1 | No fix listed |
| apache struts | = 2.3.24.2 | No fix listed |
| apache struts | = 2.3.24.3 | No fix listed |
| apache struts | = 2.3.25 | No fix listed |
| apache struts | = 2.3.26 | No fix listed |
| apache struts | = 2.3.27 | No fix listed |
| apache struts | = 2.3.28 | No fix listed |
| apache struts | = 2.3.28.1 | No fix listed |
| apache struts | = 2.3.29 | No fix listed |
| apache struts | = 2.3.30 | No fix listed |
| Apache Struts | = 2.3.x before 2.3.31 | No fix listed |
| Apache Struts | = 2.5.x before 2.5.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com product
- security.netapp.com
- struts.apache.org vendor-advisory
- web.archive.org
- github.com
- 93773 third-party-advisory vdb-entry