Home

CVE-2015-1831

Description

The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to compromise internal state of an application via unspecified vectors.

Risk Information

Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
6.005

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2015-1831 are fixed in Apache-struts2-core 2.3.20.1Windows
Vulnerabilities CVE-2015-1831 are fixed in Apache-Xwork-core 2.3.20.1Windows
Vulnerabilities CVE-2015-1831 are fixed in Apache-structs2-core for Linux 2.3.20.1Linux
Vulnerabilities CVE-2015-1831 are fixed in Apache-Xwork-core for Linux 2.3.20.1Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234