Apache Struts 2.x < 2.3.1.1 Multiple Vulnerabilities

Version 1.5

Sep 24, 2024, 7:10 PM

CVE (set "CVE" coverage to "CVE-2012-0392,CVE-2012-0393")
CVSS metrics ("CVSSv2 score" set to 6.8)
CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P")
CVSS metrics ("CVSSv3 score" set to 7.3)
CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L")
CVSS temporal metrics ("CVSSv2 temporal score" set to none)
CVSS temporal metrics ("CVSSv2 temporal vector" set to none)
Plugin metadata
Severity (changed from "High" to "Medium")