Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

struts: cross-site scripting vulnerability

Package(s):

struts

CVE #(s):

CVE-2005-3745

Created:

January 12, 2006

Updated:

March 8, 2006

Description:

The Struts error display system has a cross-site scripting vulnerability. An attacker may be able to maliciously craft a URL that can trick a user into thinking they are looking at a trusted site when they are not.

Alerts:

Red Hat	RHSA-2006:0161-01	2006-03-07
Red Hat	RHSA-2006:0157-01	2006-01-11

(Log in to post comments)