CVE-2015-1831

Publication date 16 July 2015

Last updated 24 July 2024


Ubuntu priority

Description

The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.

Read the notes from the security team

Status

Package Ubuntu Release Status
libstruts1.2-java 15.04 vivid Not in release
14.10 utopic
Not affected
14.04 LTS trusty Not in release
12.04 LTS precise
Not affected

Notes


sbeattie

affects struts 2 only


Access our resources on patching vulnerabilities